Why Vital?
We understand your challenges
Why choose Vital Advisory as your security, risk, privacy and governance partner?
Key Strengths
Trusted Advisors
We have many years experience in technology governance, risk management, information / cyber security, assurance, strategic planning, and organisational change enablement, assisting scores of clients to reach their goals.
Thought Leaders
Our people are active contributors to peak industry bodies at international, regional and local levels. We stay ahead of the latest knowledge, trends and changes that could impact your business.
Change Agents
We build a clear vision of your operations by building trust across all business levels, and then asking tough questions. We lead by example, and present each stakeholder with clear, actionable practices which they can make part of standard business.
Subject Matter Experts
Our expertise is in global frameworks and standards for information security, risk management, quality management and privacy, across wide range of industries. We deliver business value using pragmatic and contemporary best practices.
Certification Record
Our record of achievements in assisting dozens of clients to obtain ISO certification (ISO 27001, ISO 9000) is clear – every client we have worked with have achieved their certification objectives – on time and on budget.
Certified Professionals
Our staff hold most of the industry certifications for security, governance and privacy – CISM, CRISC, CISA, CGEIT, Data Privacy Solutions Engineer, ISO27001 – as well as Masters degrees in Information Security. Our staff also have years of volunteer experience in the development and improvement of these credentials and frameworks.
Respected Trainers
Vital Advisory boast three of the most highly regarded, experienced and accredited trainers in security, risk and IT governance. They regularly deliver certification courses for CISM, CRISC, CISA, CGEIT, COBIT, as well as ISO27001 implementation and audit.
Experienced Auditors
Our staff have decades of experience in conducting audits of IT, information security, and ISO 27001 and ISO 9001 implementations. We ensure that clients’ security and quality management frameworks are robust and ready to face their certification audit.
Our Approach
01 UNDERSTAND
First we understand the challenges you face and the outcomes you are aiming to achieve.
02 ASSESS
We explore your business with a range of analytical techniques to assess the root causes of problems.
03 TRANSFORM
We develop an implementation strategy to move your business to its desired state in an effective and lasting way.
04 TRANSFER
We transfer insights and knowledge to ensure that the new approaches are embedded with your team for long term independent success.
We interview senior execs and key teams to map business functions, stakeholders, information assets, systems, data flows and known risks. This data is captured in our unique PARI documentation which simplifies context gathering.
We identify and assess the risks you face and determine across the full range of your business activities. We help you determine which risks are the ones which truely matter.
We help you determine appropriate treatment plans and assist each team with taking up their responsibilities for security and risk. We audit your security framework and help develop your roadmap for security development.
Training and awareness sessions with your staff operationalises their role in security and prepares them to face certification audit. Board presentations ensure top management engage with their security responsibilities.
What our clients have to say
Certification
Audit
Training
Certification
Major Legal Firm
It was a pleasure working with Vital Advisory. They brought onboard the wealth of knowledge and experience and helped us navigate through ISO27001 requirements and in achieving the certification.
Some of the key differentiators we saw in Vital Advisory compared to other vendors were:
+ Wealth of knowledge in governance, risk and compliance and experience in implementing them
+ Focus on value of certification (why is it required, what is the best value for money)
+ Focus on Org strategy rather than treating ISO27001 as a checkbox activity
+ A constant focus on user education and not just ticking the box for audit purposes
+ Flexibility i.e. we were able to ask questions and not fear of being charged for every interaction or a slight deviation from original SoW which helped us gain more value from engagement.
Major Mining Technology Company
I engaged Vital Advisory to help us with accelerating the ISO27001 certification process. I found the methodology developed by Vital Advisory to capture the required information under the mandatory clauses novel and extremely easy to use. Everybody I dealt with at Vital Advisory was professional and good at what they do.
With Vital Advisory’s help, I was able to halve the time I would have otherwise spent on preparing for the certification. We were certified under the ISO27001 standard in 2020 in the first attempt and I can whole heartedly recommend Vital Advisory for anyone looking for help in this space.
Major Marketing Firm
Vital Advisory were with us from the start and brought us through the entire process. We decided to get ISO 27001 certification to ensure the quality of our information security.
Vital Advisory delivered a service that was exceptional and indeed enabled us to deal with BAU at times and worked around us when required. Not only did we receive our certification, we also made the date earlier than expected. I would have absolutely no hesitation in recommending Vital Advisory.
Major Health Insurer
Vital Advisory has provided us with outstanding services, they not only helped us achieve our ISO27001:2013 Certification with a clean report (no findings) but also ensured that our staff are well trained and Vital are always available to provide guidance and support. I would highly recommend their services.
Audit
Infrastructure Data Management Firm
We have relied upon Vital Advisory for expert advice on IT auditing since 2015 and have found that we can rely on both the technical content and the communication provided.
Two Vital Advisory staff have worked in cooperation with our auditors on projects and we found they fitted into our team approach and produced a quality product.
Major Health Insurer
A solid firm with a broad and deep experience set.
Major FinTech Firm
A pleasant demeanor during communication, excellent grasp of the subject, patient listening, logical assessment are some excellent traits observed in Vital Advisory during the APCA Pin Security Audit.
The Audit was a pleasure and do appreciate the efforts put in by Vital towards understanding our security posture and convincingly placing forth their recommendations to further enhance this posture.
Will strongly recommend the team at Vital Advisory for any such activity.
Training
Major IT Training Firm
We have been working with Vital Advisory on a regular basis since 2014 and have found the competence, professionalism and communication to be exemplary.
Vital Advisory has been engaged to provide high‐end training in a number of areas relating to information security management and governance. The consultants provided have been first class in knowledge, experience and ability.
We have found Vital Advisory to be very responsive to customer feedback with a constant “can do” approach. They have been quick and totally flexible in developing tailored solutions to meet specific customer needs rather than sticking with standard “off‐the‐shelf” approaches.
Finally, the calibre of communication with Vital Advisory has always been of a high professional standard with a very strong customer orientation. We have no hesitation in recommending Vital Advisory.