Skip to main content
IG-Smart — Governance, Risk & Assurance

Company

Independent governance, risk and assurance for regulated organisations

Established in 2009 and headquartered in the UK, IG-Smart supports regulated and high-consequence organisations across governance, data privacy, cyber, AI, HealthTech and independent assurance. Our work is led by senior practitioners and produces practical, evidence-led outputs.

Who we are

Governance that stands up to scrutiny.

IG-Smart is an independent governance, risk and assurance consultancy. We help organisations when governance decisions carry real consequences: regulatory, operational, security, data, patient-safety and board accountability.

We exist so that accountable people can make those decisions with confidence, and show the evidence behind them to boards, auditors, regulators, customers and procurement teams.

What makes IG-Smart different

Principles that shape every engagement

Independent judgement
Advice and assurance grounded in evidence, requirements and risk.
Senior practitioner-led
Engagements are led by experienced practitioners with direct involvement in substantive advisory and assurance work, supported proportionately where appropriate.
Evidence-led
Findings, decisions and recommendations are traceable to evidence rather than assertion.
Practical and decision-ready
Outputs designed to help accountable people make and evidence decisions.
Experience where consequences matter
Our published work spans health, insurance, life sciences, higher education, financial services and retail. See the Evidence Centre

How clients engage

Three ways to work with us

Technology supports consistency, traceability and efficient delivery; professional judgement remains practitioner-led.

  1. 01

    Defined engagements

    Assessment, audit, readiness, remediation, assurance and defined programmes.

  2. 02

    Managed & retained capability

    Ongoing specialist governance and assurance where continuity matters.

  3. 03

    Complex programmes

    Multi-framework, cross-functional, multi-jurisdictional or enterprise requirements.

Technology-enabled delivery

Structured methods, reusable evidence structures, control and framework mappings where applicable, templates, repeatable reporting patterns and digital workflow support all three.

These are not stages. Clients engage in whichever mode fits the requirement and do not need to progress through them in sequence.

Engagements & investment

Evidence of continuity

Relationships that continue as requirements evolve

  • PAUL UK

    Retained DPO service

    A partnership of more than five years.

    Read the case
  • Global entertainment group

    Repeatable acquisition governance

    A retained relationship since 2018.

    Read the case
  • The Co-operative Group

    Routine penetration testing

    A preferred-supplier relationship of more than two years.

    Read the case
  • Glenmark Pharmaceuticals

    Retained external DPO service

    Continuing support across EU and LATAM operations.

    Read the case
  • UCL

    Follow-on work

    An initial governance audit, followed by leadership training and a physical-security audit.

    Read the case

Leadership & practitioners

Our people

Meet Our People

How IG-Smart scales specialist expertise

Making specialist governance more consistent and repeatable

Specialist judgement, structured methods, reusable evidence and technology-enabled workflow work together, so that learning and quality carry from one engagement to the next. None of these replaces practitioner judgement.

Structured methods
Consistent approaches to assessment, readiness and assurance work.
Framework mappings
Control and requirement mappings, used where an engagement spans more than one framework.
Reusable evidence structures
Evidence organised so it can be maintained and reused rather than rebuilt.
Templates and reporting patterns
Tested formats for registers, assessments and board-level reporting, adapted to each organisation.
Digital workflow
Delivery tracked and managed digitally so work stays traceable.

Corporate trust at a glance

Company and certification

Company
IG-Smart Ltd
Established
Established 2009
Registration
Registered in England & Wales — Company no. 06873438
VAT
VAT no. GB 161 5964 93
Registered office
1 Park Road, Hampton Wick, Kingston Upon Thames, KT1 4AS
Certification
ISO/IEC 27001:2022 Information Security Management
Certificate No. 487582026

Careers

IG-Smart is interested in hearing from experienced specialists, early-career talent and specialist or associate consultants.

Explore Careers

Partnerships

We are open to relevant specialist, delivery and strategic relationships where they extend our capability while preserving appropriate professional independence.

Discuss a Partnership

Discuss a governance, risk or assurance requirement

IG-Smart Ltd · Company no. 06873438 · info@ig-smart.com