Best for: Organisations with fragmented information ownership, records obligations or governance controls.
Operating models, records controls, accountability structures and evidence that let organisations manage information responsibly and withstand scrutiny.
Evidence, decisions and working governance — not generic consultancy slides.
01Current-state assessmentA documented assessment against the applicable law, standard, contractual requirement or framework.
02Prioritised remediationA practical remediation plan with owners, effort, dependencies and sequencing.
03Working artefactsPolicies, registers, DPIAs, governance documents, evidence packs and other agreed deliverables — not generic templates.
04Decision-ready reportingReporting written for boards, auditors, regulators, customers and procurement reviewers.
05Residual-risk positionA clear statement of what has been resolved, what remains outstanding and where risk has been accepted.
Evidence
Selected Client & Programme Experience
Selected organisations and programmes where IG-Smart expertise has supported governance, privacy, cyber, assurance or regulated transformation.
Selected experience includes: NHS & health (NHS England) · Pharmaceutical & life sciences (Glenmark Pharmaceuticals) · Technology & consulting (Capgemini) · Insurance & financial services (AIG) · Higher education & research (UCL) · Retail & consumer enterprise (The Co-operative Group)
Data Privacy & DPO
Requirement
An external DPO service providing timely, context-aware advice and helping the organisation identify and address privacy concerns before they escalate.
IG-Smart’s role
External DPO service
Advisory support to legal and compliance teams
Delivered / outcome
Glenmark received continuing external DPO capability across its EU and LATAM remit, with responsive support for privacy issues as they arose.
Client perspective
“Knowledgeable and responsive… IG help us to navigate an otherwise tricky area of compliance.”
Oliver Bourne, Vice President, Legal and Compliance – EU and LATAM, Glenmark Global Pharmaceuticals
An independent audit of existing IG policies and SOPs, and a clear, prioritised improvement plan aligned with evolving DSPT requirements.
IG-Smart’s role
Audit and gap analysis of IG policies and SOPs
Prioritised improvement plan
Delivered / outcome
The client's Head of Information Governance reports that the audit report clearly indicated areas to prioritise and helped shape and focus the final DSPT submission.
Client perspective
“The report provided insight that helped shape and focus our final DSP Toolkit submission.”
Trevor Peacock, Head of Information Governance, UCL
An independent, nationwide audit of the supplier's data-protection and security arrangements.
IG-Smart’s role
GDPR and sector-regulation compliance review
Physical and environmental security
Delivered / outcome
The audit identified areas for improvement and gave AIG a structured assessment of the supplier's information-governance, security and operational controls.
Client perspective
“The audit not only identified areas of improvement but also showcased our dedication to transparency and integrity.”
Advice and assurance that can state clearly what remains unresolved.
Senior practitioner-led delivery
Engagements are led by experienced practitioners with direct involvement in substantive advisory and assurance work, supported proportionately where appropriate.
Technology-independent advice
Recommendations are driven by evidence, applicable requirements and risk rather than incentives to sell a particular third-party technology platform.
Defensible evidence
Residual-risk visibility
Senior accountability
How we deliver
One delivery architecture, from first assessment to continuous improvement
01
Assess
Establish the real position against the applicable law, standard or framework.
02
Build
Design the governance, controls, documentation and evidence that will withstand scrutiny.
03
Manage
Run the programme day to day, or support the team that does.
04
Assure
Test, report and demonstrate the position to boards, regulators and customers.
05
Improve
Close findings, raise maturity and keep evidence current between cycles.
Improvement feeds the next assessment cycle, so governance and evidence remain current rather than being rebuilt for every audit.
Commercial clarity
Engagements & Investment
We publish indicative investment levels so organisations can establish commercial fit before committing time to a conversation. Final fees depend on scope, complexity, regulatory requirements, existing maturity, evidence available and delivery timescale.
Defined-scope engagements
Starting investment: £7,500 + VAT
Assessments, readiness exercises, independent reviews and defined deliverables.
Managed & retained services
Starting investment: £2,500 + VAT per month
Ongoing DPO, governance, assurance and managed specialist support.
Complex & enterprise programmes
Starting investment: £25,000 + VAT
Multi-workstream, multi-country or transformation requirements.
Scope, deliverables, assumptions and fees are agreed in writing before work begins.
