Loading page…
Cybersecurity · Governance, Risk & Compliance
Dabster Group is a cybersecurity, GRC, ISO and data governance consultancy. We design and implement the programmes your regulators, certification bodies and enterprise customers actually test — and where you want the framework and the tooling from one accountable team, we run them in SecureGRC, our own enterprise GRC platform.
Not ready to talk? Use our checklists or send us a requirement.
Management systems we implement
Standards we implement and audit for clients.
Services
Engagements are staffed from the practices your problem actually needs — not sold as separate projects that never speak to each other.
Risk frameworks, regulatory obligations and a GRC operating model your board can actually govern from.
ISO 27001, 27701, 27017, 20000-1, 9001, 22301, 14001, 45001 and 37001 — from gap analysis to certification and beyond.
Vulnerability assessment, penetration testing, configuration review, web application testing and source code review.
Internal audit, control testing, compliance evaluation and operational reviews against recognised standards.
Ownership and stewardship, classification, data quality and lifecycle — with privacy obligations built in from the start.
Practical security, privacy and compliance training that changes how teams work — not annual slide decks.
How we work
Nine phases, each ending in something you can read and challenge before the next begins. No stage depends on trusting that the previous one went well.
Most engagements enter partway through. What matters is that no phase is skipped silently — and the two skipped most often, context and validation, are the two that determine whether the result holds.
SecureGRC · our platform
Every framework you adopt brings its own control list. SecureGRC normalises requirements from all of them into one catalog and maps them to a canonical control set — so one control, tested once and evidenced once, satisfies every standard it answers to.
Obligations mapped
412
of 468
Controls tested
86%
this cycle
Open findings
17
4 overdue
Risks above appetite
6
2 accepted
Assigned to me
3 itemsWhy Dabster Group
Not size, and not a claim to be everywhere. Four things we can point at.
Most consultancies hand over a document set. We implement the framework, populate the registers, and provide a platform that keeps it operating afterwards.
The same practice that writes your ISMS also tests your networks, applications and code. Controls get designed by people who know how they fail.
Where we implement, a separate team audits — with the separation documented, so your certification body has no reason to question it.
Engagements end with your team trained, a full reporting cycle run alongside them, and the programme owned internally.
Resources
Checklists and self-assessments taken from how we run engagements. Complete on the page — no form, no email address, no download wall.
Start a conversation
A certification body, a supervisory authority, an enterprise customer or your own board — the audience determines the programme. Tell us the requirement and the deadline, and we will scope what it realistically takes to meet it.
No obligation. If the work required is narrower than you expect, we will say so.