About Right Step Consulting

Right Step Consulting is a specialist information security, AI governance, compliance and technology recruitment consultancy supporting small and growing businesses.

Led by a PECB-certified ISO/IEC 27001 Lead Implementer, we combine specialist ISO knowledge with over 15 years of experience across IT project delivery, technology transformation, PMO, governance, risk and compliance.

​

Information Security & ISO 27001

We provide practical, hands-on support throughout the ISO/IEC 27001 journey, from initial gap assessment and ISMS implementation through to certification readiness.

Our services include:

• ISO 27001 gap assessments

• ISMS implementation

• Information security risk assessment and treatment

• Policies and required documentation

• Statement of Applicability (SoA)

• Governance and security controls

• Internal audit preparation and certification readiness 

​​

AI Governance & ISO 42001

We support businesses looking to establish effective AI governance and align their practices with ISO/IEC 42001, the international standard for Artificial Intelligence Management Systems (AIMS).

Our support focuses on helping organisations understand and implement the requirements of ISO 42001, including:

• AI governance and management system requirements

• AI risk and impact assessments

• AI policies, processes and documentation

• Roles, responsibilities and accountability

• Alignment with existing ISO 27001 management systems

• Preparation for ISO 42001 certification

​

Governance, Risk & Compliance

We help organisations strengthen governance, manage information security and data protection risks, and implement practical policies and controls to support their wider compliance requirements.

​

ISO Training & Professional Development

As an official PECB Partner, Right Step Consulting offers access to internationally recognised ISO training and professional certification programmes at competitive rates.

Flexible, self-paced online training is available for individuals and businesses looking to develop expertise in information security, AI governance and compliance, including ISO 27001 and ISO 42001 Foundation and Lead Implementer courses.

​​