All work
An independent audit of a tool handling sensitive health and social data.
A contract management platform had never been independently audited. The organisation wanted certainty, not assumptions, before scaling further.
- Client
- PEP Lor’Est
- Period
- Mar — Apr 2024
- Scope
- Security, performance and data audit
- Type
- Client mission
Context
A proprietary tool processing sensitive healthcare and social data, with no external review to date.
What we did
- Four-week audit covering around 100 criteria
- Security, performance and data management assessed
- Prioritised remediation roadmap, actionable immediately
Outcome
- 100
- criteria reviewed
- 4
- weeks from kick-off to roadmap