HomeCase Studies › Fintech & compliance
Cybersecurity / Compliance

From no security programme to SOC 2 ready in twelve weeks

A SaaS company had an enterprise contract on the table that depended on SOC 2 Type II readiness within three months — with no security team, no controls and no prior compliance experience. We ran the programme end to end.

ClientB2B SaaS company (confidential)
IndustryCybersecurity / Compliance
What we deliveredSecurity engineering, compliance programme, policy & evidence automation
From no security programme to SOC 2 ready in twelve weeks
12 weeksZero to audit-ready
AutomatedContinuous evidence collection
UnlockedEnterprise sales pipeline

01 The challenge

The engineering team was small and focused on product. Access control, logging, change management, vendor management and incident response existed informally at best. The deadline was fixed by the customer, and failing it meant losing the contract and the enterprise pipeline behind it.

02 What we did

  • Gap assessment against SOC 2 Trust Services Criteria, prioritised by audit impact
  • Security engineering: SSO and MFA, least-privilege access, centralised logging, encryption, backup and recovery, vulnerability management
  • Policies and procedures written for how the team actually works, not boilerplate
  • Evidence automation connected to cloud, code and HR systems so audit evidence collects itself
  • Auditor liaison and readiness review before the observation period

03 The results

  • SOC 2 Type II audit readiness achieved within the twelve-week deadline
  • The enterprise contract closed
  • Subsequent enterprise sales unlocked with a repeatable security posture
  • A security foundation that scales with the company

More case studies

Other projects from the same team.

Secure mobile device management for a UK local council Local government
UK local council (London borough)

Secure mobile device management for a UK local council

NHZ Global supplied and customised a mobile device management platform that lets a London borough council's IT team lock down, configure and support frontline Android devices from one console — later licensed to a second borough.

2London borough councils
Read case study →
Sendtra: home-to-school transport management and a driver app for a UK local council Local government / passenger transport
UK local council (London borough) — passenger transport service

Sendtra: home-to-school transport management and a driver app for a UK local council

Councils run hundreds of daily home-to-school journeys for children with special educational needs and disabilities (SEND). Sendtra gives the transport office one place to plan routes, allocate drivers and passenger assistants, and see every journey happening — with a driver app that replaces paper run sheets.

2021Driver app launched on Google Play
Read case study →

View all case studies