FAQ
Frequently Asked Questions
Clear answers about IT governance, risk and compliance, IT audit, and professional training with Horus Consultancy.
What does Horus Consultancy do?
We provide IT governance, risk and compliance (GRC) consulting, internal and external IT audit services, and professional training through Horus Academy. Our work helps organizations understand their risks, assess controls and plan practical improvements.
Where do you work?
Horus Consultancy is based in Canada and serves organizations across North America and the Gulf. Remote delivery and any on-site requirements are agreed for each engagement.
What is IT GRC consulting?
IT GRC connects technology governance, risk management and compliance. An engagement may cover a current-state assessment, risk registers, policies, control responsibilities and a prioritized improvement roadmap. The scope depends on your organization and objectives.
What is the difference between an internal and an external IT audit?
An internal IT audit supports an organization’s assurance and improvement objectives. An external IT audit is performed by an outside party against an agreed scope and criteria. Independence, reporting arrangements and any applicable assurance requirements must be defined before the work starts.
Can you help us prepare for an audit?
Yes. We can help clarify the scope, identify evidence requirements, assess readiness and organize a remediation plan. Readiness support does not guarantee a successful audit or certification.
Do you issue ISO certificates?
Consultancy, readiness assessments and internal audits are different from accredited certification. Where certification is your objective, the applicable certification body makes its own independent certification decision.
Who delivers the work?
Islam Elzayat brings more than 17 years of experience across IT service management, digital transformation, cybersecurity, governance, risk and compliance. The delivery scope and responsibilities are confirmed in the engagement agreement.
How are fees and timelines agreed?
Fees and timelines depend on the objectives, systems, locations, evidence and depth of review. After an initial discussion, the proposed scope, deliverables, responsibilities and commercial terms are agreed in writing.
How do I book a call?
Use our existing 45-minute booking calendar. Select your time zone, choose an available time and follow the calendar’s booking steps. You can also email info@horusconsultancy.ca or call +1-506-300-5550.
Where can I find training and education?
Visit Horus Academy for current training options, course details and enrollment information. Training availability and any course-specific terms are provided there.
What should I share before a first call?
A brief description of your organization, your main challenge and your target timeline is enough. Please do not send passwords, sensitive audit evidence or confidential client data through an initial enquiry. A suitable information-sharing process can be agreed for the engagement.
Can Horus conduct an internal audit and help arrange an external audit?
We can discuss internal audit services and facilitate an external certification enquiry with MSECB where permitted. The proposed arrangement must pass MSECB’s acceptance and impartiality checks. MSECB assigns eligible external auditors and makes certification decisions; Horus does not issue its certificates.
Can the consultant also certify the same work?
Consultancy and audit relationships must be disclosed and assessed for conflicts. An external certification auditor must not assess their own consultancy work. For ISO/IEC 42001, MSECB’s specific conflict-of-interest restrictions must also be checked before agreeing the service combination.
Where can I learn about AI governance and ISO readiness?
Read our practical guides to AI governance, AI risk management, ISO/IEC 42001, ISO/IEC 27001 and ISO/IEC 20000-1.