IT compliance advice in Hull and the East Riding
I help businesses in Hull and the East Riding understand IT compliance requirements, address control gaps and organise evidence for review. Support covers SOC 2 readiness, ISO 27001 preparation and data protection controls.
- 15+
- years experience
- Project and advisory
- engagement options
- Scope and deliverables
- agreed before work begins
- Hull and East Riding
- service area
Is this the right support for your business?
A customer, auditor or business partner needs evidence of your controls, and you need a clear view of the preparation required.
What you receive
A documented gap assessment, prioritised remediation actions, named responsibilities and an evidence plan matched to the agreed requirements.
Where we start
Bring the framework or customer requirements, target dates and any existing policies or assessments. We can scope a readiness review before agreeing implementation support.
How pricing is agreed
The framework, organisational scope, current controls and evidence gaps determine the work. Independent auditor or certification body fees are separate; certification is not guaranteed.
Working together locally
Based in the East Riding of Yorkshire, I work with businesses in Hull and across the East Riding. Remote sessions and on-site work can be agreed around the engagement. We confirm availability, travel and any on-site requirements when scoping the work.
Why it matters
The priorities and deliverables we can agree for your engagement.
A documented view of gaps, responsibilities and remediation priorities
Evidence to support customer security reviews and audit preparation
Policies and evidence records tailored to how your organisation operates
How it works
Three straightforward steps from first contact to a clear plan.
Request a free call
A 30-minute call to understand your situation, goals, and constraints. No sales pitch - just an honest conversation.
We assess your needs
I review your current setup, identify gaps, and work out what approach will deliver the best outcome for you.
You get a clear plan
A proposal with the scope, responsibilities, timeline and pricing agreed before work begins.
What's included
Frequently asked questions
Can you issue a SOC 2 report or ISO 27001 certificate?
No. I help prepare your organisation, controls and evidence. A SOC 2 examination is performed by an independent CPA firm, and an ISO 27001 certificate is issued by a certification body following its assessment. Those external services are scoped separately.
What if our policies exist but the supporting records are incomplete?
We first separate what the documents say from what the available records show. For example, an access-review policy may name an owner and review schedule, while the records supplied contain no completed review for the period being assessed. That leaves an evidence gap. It does not, by itself, prove that the review never happened. The next step is to ask the owner for the relevant record and establish what work was performed. If the review was missed, we can agree a remediation action and responsibility. We record unresolved questions rather than treating a written policy as proof that the process works. Bring the requirement you need to meet, the relevant dates and the records you have so we can scope the next work. A readiness review supports preparation; it does not replace the independent assessment described above.
What affects the cost of compliance support?
Cost depends on the framework, scope, existing policies and controls, evidence gaps and staff availability. We review these factors before agreeing the work and pricing, including any separate auditor or certification body fees.
What compliance frameworks do you specialise in?
My work covers SOC 2 readiness, ISO 27001 preparation and data protection controls. We first establish which requirements apply to your organisation and customers, then agree the scope and any specialist advice or independent assessment needed.
How is the schedule for SOC 2 readiness agreed?
The schedule depends on your current controls, evidence, available staff and the scope agreed with your independent auditor. Within the examination scope, Type I considers control design and implementation at a specified date. It does not test operating effectiveness over time. Type II considers design and operating effectiveness over an examination period. A readiness assessment identifies the preparation needed before we agree a schedule. The examination scope and timing need separate agreement with the auditor.
Can you help with compliance for UK-based organisations?
Yes. I support organisations in the East Riding of Yorkshire and across the UK with scoped readiness reviews, control development and evidence preparation. We agree the requirements to review, the available records and who is responsible for follow-up work. Any specialist advice or independent assessment is agreed separately.
Related articles
SOC 2 secure controls in 2025
Explore the latest SOC 2 updates and Secure Controls Framework changes. What security teams must know about Zero Trust, AI governance, and compliance in 2025.
Cyber resilience: why prevention fails
Part 1 of 7: The prevention-first security model is broken. Discover why CISOs must embrace a cyber resilience approach to protect their organisations in 2026.
Zero trust security: a practical strategy
Plan zero trust architecture with identity checks, device controls and least privilege. Use practical assessment examples and a phased implementation roadmap.
Other services
IT management
IT management consulting gives your business senior technology guidance without hiring a full-time IT director.
IT project management
IT project management brings scope, delivery planning, risk management and stakeholder communication together.
Web development
I build bespoke websites and web applications for UK small and medium-sized businesses.
Technical consulting
Technical consulting provides an independent review of your technology and a prioritised plan for improvement.
Security consulting
Security consulting helps UK businesses understand cyber risks and prioritise practical improvements.
Ready to get started with IT compliance?
Request a free 30-minute consultation to discuss your needs. Send a short outline using the contact form and we can arrange a conversation about what you are trying to achieve.