Connected services / New Zealand

From a requirement to a working system.

Governance, technical security, independent review and operations serve different purposes. Connect them around the outcome you need, without treating them as interchangeable labels.

Find your pathway

On this page

Start with the requirement

A sequence that fits the work.

A customer asks for assurance

Clarify whether the customer needs an ISO certificate, a SOC 2 report, an internal-audit result or answers about specific controls. Agree the service boundary before committing to a deadline.

ISO 27001 implementation — ISMS implementation built around your scope and risks.
SOC 2 readiness — Type I & II readiness for SaaS selling into the US.
ISO 27001 internal audit — Independent Clause 9.2 audits with auditor impartiality checks.

Your organisation is introducing AI

Identify intended uses and responsibility first. Connect AI governance with privacy and technical access, and plan an objective review of the management-system evidence.

ISO 42001 AI governance — AI management system (AIMS) for the AI you run.
ISO 27701 privacy management — Privacy information management system implementation.
ISO 42001 internal audit — Independent Clause 9.2 audits of your AIMS.

Security improvements need to become routine

Assess the agreed environment, prioritise authorised changes and establish ownership for ongoing administration. Penetration testing answers a different question from a configuration review.

Microsoft 365 security assessment — Understand your exposure and prioritise the next steps.
Email security — Strengthen domain authentication and mailbox protection.
Data protection and access — Review sharing, access and protection for business information.
Penetration testing — Manual testing, reporting and scoped remediation verification.
On-Demand IT support — Scoped Microsoft 365 support and ongoing operations.

A group needs financial-control evidence

Connect readiness work with a clearly defined testing scope. Agree control criteria, relevant systems, the evidence period and the independence expectations of the stakeholders.

SOX and ITGC readiness — Controls readiness for US-listed & pre-IPO groups.
SOX ITGC testing — Independent IT general controls testing for Section 404.

Build internal capability

Training supports the people doing the work.

Aegentra Academy provides individual PECB learning pathways. Selected ISO 27001 and ISO 42001 options can be discussed as a separately quoted course-plus-consultant package; enterprise online classes are also available by enquiry. Neither a training purchase nor exam practice is an implementation project or certification audit.

Plan the engagement

Agree the boundary before the bundle.

Start with the requirement, the systems involved and the outcome you need. Please do not send passwords, sensitive records or unrestricted tenant access in an initial enquiry.

Discuss this work Contact details