Independent · UK · Regulated sectors
Senior-led governance, risk and assurance to address critical gaps, strengthen accountability and produce defensible evidence for procurement, audit, regulatory scrutiny and board decisions.
Selected organisations and programmes supported by our practitioners
ISO/IEC 27001:2022 certified
Information Security Management · Certificate No. 487582026
Award-winningM&A Today Global Awards 2026 · GDPR Consultancy of the Year 2020 & 2021View recognition
When governance becomes business-critical
Choose a situation and the Assurance Pathfinder will suggest the right route.
Selected programme experienceDepartment of Health and Social Care
IG-Smart led the legal and information-governance workstream and managed the Probity Cell, helping maintain accountable decision-making during rapid programme delivery.
How it works
Get started
Our services
Integrated expertise across privacy, information governance, cyber, AI, health and supplier assurance.
Clear cyber risk ownership, control oversight and evidence that help leadership make informed decisions.
Explore service: Managed cyber governance and vCISOProportionate review of critical suppliers, with clear findings, accountable actions and ongoing assurance.
Explore service: Managed supplier and third-party assurancePrivacy programme capability and independent DPO oversight, with clearly defined roles and engagement scope.
Explore service: Enterprise privacy office and outsourced DPOClear accountability, risk assessment and oversight throughout the lifecycle of your organisation’s AI use.
Explore service: Managed AI governance and assuranceClear information ownership, lifecycle controls and accountability for the data your organisation relies on.
Explore service: Regulated data governance and qualityDigital-health governance and procurement readiness, with clinical-safety responsibilities and specialist scope made clear.
Explore service: HealthTech and digital clinical assuranceOur approach
Establish the real position.
Design the governance, controls and evidence required.
Run or support the operating programme.
Test and demonstrate the position.
Close findings and keep evidence current.
Improve feeds the next Assess cycle, so evidence stays current.
Why IG-Smart
Advice and assurance that can state clearly what remains unresolved.
Experienced practitioners remain directly involved in substantive advisory and assurance work.
Recommendations follow evidence, requirements and risk rather than incentives to sell a third-party technology platform.
Evidence
Assurance, governance and regulatory support for complex, regulated organisations.
Context imageGlenmark Pharmaceuticals
Context imageAIG
Deliverables
Evidence, decisions and working governance — not generic consultancy slides.
Illustrative outputs
Illustrative examples of the assessments, action plans, dashboards and executive reporting clients may receive — designed to turn evidence into clear decisions and measurable progress.
Illustrative output
Current position
A clear, evidence-based view of your current position against relevant standards, regulations and good practice.
What it helps you see and do
Typical use cases
Likely format
Illustrative output
Remediation & action
The gaps that matter, turned into sequenced actions with owners, dates and dependencies.
What it helps you see and do
Typical use cases
Likely format
Illustrative output
Ongoing oversight
A recurring view of risks, actions and evidence, so you can see whether governance is improving.
What it helps you see and do
Typical use cases
Likely format
Illustrative output
Executive decision support
A concise, evidenced view for leadership: where you stand, what remains, and what must be decided.
What it helps you see and do
Typical use cases
Likely format
Illustrative structure — not a client document. Exact outputs and formats depend on the agreed scope.
Ways to work with us
Scope, deliverables, assumptions and fees are agreed with you before work begins.
One clear outcome. One agreed scope.
Choose this when you need
Senior capability without permanent senior headcount.
Retained advisory provides continuing access to senior advice, oversight and agreed review/reporting activity.
Managed services include ongoing delivery or operation of an agreed governance, assurance or specialist capability.
Choose this when you need
Complex requirements. Coordinated delivery.
Choose this when you need
Use the short Assurance Pathfinder to identify the right route for your situation.
Find the Right ServiceScope, deliverables, assumptions and fees are agreed in writing before work begins. Published ranges are indicative, not a quotation.
