02 / ASSESS
Compliance
assessments.
Prepare for SOC 2, ISO 27001 or customer security reviews with a clear view of your gaps and next steps.
Book a 30-minute call01 / THE STARTING POINT
From requirements
to priorities.
You may be working towards your first SOC 2 report, preparing for ISO 27001, or responding to a customer’s security requirements. We help turn those requirements into work your team can plan and deliver.
For SOC 2, we assess your controls and supporting evidence against the applicable AICPA Trust Services Criteria. Through interviews and evidence review, we identify gaps in how controls are designed, operated and documented.
What we can cover
- SOC 2 readiness and gap assessment
- ISO 27001 readiness and gaps
- Customer security requirements
- Control mapping, policies and supporting evidence
- Implementation support and audit preparation
- Security tool selection, procurement coordination and technical implementation
For SOC 2, we agree the system boundary, relevant Trust Services categories and target Type I or Type II report. Implementation support is scoped separately from the initial assessment.
02 / WHAT YOU GET
A clearer view.
A practical plan.
An evidence-based gap assessment
A view of the agreed requirements, the evidence reviewed, and where practices are missing, incomplete or inconsistent.
Prioritised recommendations
An explanation of each gap and the work needed to address it, with attention to your risks and business deadlines.
A readiness roadmap
A sequence of actions with suggested owners, dependencies and evidence to prepare. For SOC 2, this includes priorities for control implementation and evidence collection ahead of the independent examination.
03 / WORKING TOGETHER
Clear scope.
Shared expectations.
Set the reference point
Agree the requirements, assessment boundaries, stakeholders and available evidence.
Review the reality
Review documentation and speak with the people responsible for the work. Identify gaps and uncertainties.
Plan the next steps
Discuss the findings and agree which actions deserve attention first.
BROONAT provides readiness assessments and implementation support. The SOC 2 examination and report are delivered by an independent CPA firm; ISO 27001 certification is performed by an independent certification body.
HANDS-ON IMPLEMENTATION
From choosing tools
to making them work.
When the roadmap calls for new security tooling, we can take it from requirements and budget planning through procurement, technical deployment and handover.
Plan & select
Define requirements, review your existing stack, compare suitable tools and recommend a budget and implementation plan.
Coordinate procurement
Work with vendors on quotes and licensing, help arrange the purchase with your approval, and set up subscriptions under your organisation’s ownership.
Deploy & integrate
Install, configure and integrate the agreed tools into your environment — such as endpoint protection, device management, identity and access management, or vulnerability management.
Validate & hand over
Check the agreed configuration and integrations, document the setup and walk your team through day-to-day operation. Ongoing administration can be scoped separately.
Tool selection, purchases and technical changes are agreed with you before execution. Implementation is separately scoped from the gap assessment and performed with authorised access. Licences and other third-party charges are budgeted separately from BROONAT’s service fees.
YOUR NEXT MOVE
Make your next
step clear.
Preparing for SOC 2 or ISO 27001? Tell us your customer requirements and target timeline. We’ll help define the scope and next steps.
Book a 30-minute callScope, timing and fees agreed before work begins.