Services
Information & Technology Governance
COBIT, ISO 27001, NIST and DORA in one operating model. We turn technology risk into a board-level system with owners, controls and evidence.
Book a 15-min intro call
Led by
Gökhan Polat · Information & Technology Governance Expert
More than twenty years in enterprise risk, internal audit and information security; Paribu, SabancıDx, EY Türkiye. CISA, CRISC, CISM, CISSP, CIA; ISACA accredited trainer.
Most organisations run technology governance as a collection of policies nobody reads and audits nobody wants. Regulators no longer accept that: DORA for financial entities, MiCA for crypto firms, KVKK and GDPR for everyone, and the board's own duty to understand the risk it carries. What they all ask for is the same thing, a framework that names who decides, who controls and what proves it.
We build that framework on the standards your auditors and regulators already recognise, COBIT 2019, ISO 27001 and 22301, NIST CSF, sized to the organisation rather than copied from a template. The result is a governance system the board can read in one page and the IT team can run every day.
Scope
What this service covers.
Governance Framework Design
COBIT 2019 or ISO based operating model: decision rights, committees, policies and the control library that connects them. Built for your size, not for a certificate on the wall.
DORA and MiCA Readiness
Gap assessment against the ICT risk, incident reporting, resilience testing and third-party requirements, then a remediation plan with owners and dates.
Cybersecurity and Resilience Strategy
Security architecture reviewed against the threats that actually apply to you, business continuity and disaster recovery designed to ISO 22301, tested rather than filed.
IT Risk Management
A risk register that maps technology risk to business impact, with appetite, tolerances and a review rhythm the board can follow.
Data Privacy Compliance
KVKK and GDPR obligations turned into technical and organisational controls: data inventory, access, retention, breach response. Delivered with our legal team.
Governance Assessment and Board Reporting
A maturity assessment of the current state, a target state agreed with management, and a reporting format that gives the board what it needs and nothing it does not.
More services