What we do

Provide independent cybersecurity assessments and pragmatic advisory services that help organisations manage risk, demonstrate compliance, and improve credibility with their customers.

We specialise in practical, real-world implementation and assurance — not paperwork for the sake of it.

Services

Our Services

  • We help organisations build or strengthen their Information Security Management System (ISMS) to meet ISO 27001 requirements. Our approach focuses on practical implementation—embedding risk management, control effectiveness, and continual improvement so you can achieve certification with confidence and minimal disruption.

  • We support organisations seeking accreditation under the Department of Employment and Workplace Relations’ (DEWR) Right Fit for Risk (RFFR) framework, governed by the DEWR ISMS Scheme.

    Our service guides you through each stage of the process — mapping your controls to the RFFR requirements, aligning with ISO 27001 and the Australian Government Information Security Manual (ISM), and building the evidence and documentation needed to demonstrate your organisation’s suitability and capability to securely manage government data.

  • We assist organisations in establishing or refining their Quality Management System (QMS) to meet ISO 9001 standards. Our approach is pragmatic—focused on driving measurable improvements, reducing waste, and ensuring consistent delivery of quality outcomes. We tailor frameworks to your operations, helping you achieve certification while enhancing customer satisfaction and operational efficiency.

  • We guide organisations in implementing and maintaining an AI Management System (AIMS) aligned with ISO/IEC 42001. Our service helps you manage AI-related risks, ensure transparency, and demonstrate responsible AI governance. We focus on practical integration of controls for data integrity, bias management, and ethical AI use—supporting certification readiness and stakeholder trust.

  • As an accredited IRAP Assessor, Assurance Bureau delivers independent ISM assessments for government agencies and their supply chain.

    We assess your systems and controls against the ISM, document findings, and produce the evidence base your Authorising Official needs to make informed risk acceptance decisions.

    Whether you are approaching a new system authorisation or managing an ongoing assessment cycle, we bring the technical rigour and security clearance to support you end to end.

  • We help organisations extend their privacy management practices to meet ISO 27701 requirements, whether building on an existing ISO 27001 certification or pursuing a combined ISO 27001 + ISO 27701 implementation. Our approach addresses privacy risk, data subject rights, and accountability obligations so you can demonstrate compliance with confidence.

  • Ongoing fractional security leadership for organisations that need a CISO function without a full-time hire. Assurance Bureau provides strategic risk oversight, board reporting, compliance program management, and incident response governance — tailored to your size, sector, and regulatory obligations.

Services

Why Us

  • Proven track record

    We’ve lived the ISO journey from the inside. We know what actually works because we built and ran real-world ISMS programs.

  • Technical & Governance Background

    We bridge the gap between engineers and executives. We speak both languages fluently, so you get fast decisions, clean evidence, and no mixed messages.

  • Pragmatic

    We don’t create paperwork for the sake of it. We focus on practical controls that actually reduce risk — and drop everything that doesn’t.

  • Independent certification shows customers, partners, and regulators that your controls are tested and your risks are actively managed.

  • Structured management systems surface weaknesses early, reducing the likelihood and impact of security incidents, outages, or compliance failures.

  • Certification unlocks contracts and markets — especially government, defence, enterprise, and regulated sectors where assurance is mandatory.

Ready to get started?

Whether you need internal audits, certification support, or a practical management system that your team can actually run, we can help.

Enquiries are usually answered within 48 hours.

By submitting this form, you consent to Assurance Bureau collecting and using the personal information you provide to respond to your enquiry and manage our business relationship.
If you choose to subscribe to news and updates, we will also use your contact details to send you occasional communications about our services or insights. You can unsubscribe at any time.
We do not share your information with third parties except as required to deliver our services or by law.
For more information, see our Privacy Policy.

  • "We engaged Daniel to run our internal audit before our ISO27001 stage 2 audit. He audits for JAS-ANZ accredited certification bodies, so he ran ours the way a stage 2 actually runs, and graded findings the same way, which gave us a clear line between what had to be closed and what could wait. He could also translate broadly worded requirements into something concrete for our engineering teams. Our external auditor listed the internal audit as a strength in her report. Highly recommended"

    —Melissa Pollard, HNECC PHN

  • "I worked with Daniel at Swyftx and partnered with him on our People and Culture audits for ISO27001. Daniel did an excellent job of preparing us through our internal audit and guiding us through the external audit to ensure we were fully prepared to put our best foot forward. He made the experience extremely seamless and pain free and always went out of his way to advise me around best practice and to provide educational advice as well. I would highly recommend working with Daniel and having him on your team."

    —Danielle Arrebola, Former Swyftx P&C Manager

  • "Dan came to Swyftx and deployed his broad range of capabilities to achieve a number of high value objectives: achieve ISO27001, uplift security risk management, establish a security governance program. He has had great success at Swyftx, and was a hugely valuable team member."

    — Chris Polkinghorne, Former Swyftx Head of Security