Led by Nimbe Akerele, Mang Morgan helps organisations build a working ISMS, prepare for certification and obtain an appropriately independent internal audit.
ISO/IEC 27001 Lead Auditor with certification-body and internal-audit experience.
Before establishing this practice, Nimbe worked with organisations ranging from growing technology companies to large multinationals on security, privacy and assurance. In senior and lead auditor roles, he has led audit teams, coordinated assignments and resources, and reviewed the quality of audit work.
That experience informs a practical question throughout each engagement: can your team show how the system works, explain its decisions and produce evidence that supports them?
The experience above is Nimbe’s professional background, including work before this practice. Representative samples on this website are fictional.
Technology experience
Familiar with the environment your team works in.
Nimbe’s experience spans SaaS, software development, fintech, AI and regulated technology organisations, including environments using AWS, Azure and Google Cloud.
We connect governance and risk decisions to the day-to-day work of engineering, operations and management.
Evidence workflows
Your tools. A considered assessment.
Experience with Drata, Vanta, Secureframe, Formalize, OneTrust and Kabide, alongside SharePoint, Jira and Confluence, helps us plan how evidence is requested and reviewed.
Platform familiarity helps the workflow. Interviews, sampling and professional evaluation establish what the evidence supports.
What working together looks like
Useful work, with a clear purpose.
You should know what you are buying, what your team needs to contribute and how the result will help you decide what comes next.
Agree the right scope
We discuss your starting point, deadlines and existing arrangements, then set out the deliverables, responsibilities and fee in a proposal.
Build ownership
Implementation support helps your team establish policies, risk decisions and operating routines it can maintain after the engagement.
Make findings useful
Audit conclusions connect to the agreed criteria, evidence reviewed and samples tested, giving management a clear basis for action.
Review before release
Each proposal sets out the review arrangements. Assurance outputs pass those reviews and the release check before issue.
