IT GRC Consulting, Audit & Professional Education
Practical support for organizations strengthening governance, managing technology risk and improving assurance. Based in Canada, Horus Consultancy serves North America and the Gulf.
IT Governance, Risk & Compliance Consulting
Connect your business objectives with clear responsibilities, effective controls and a practical GRC roadmap. We work with your team to understand the current environment and prioritize improvements based on risk.
- IT governance and GRC maturity assessments
- Technology risk assessments and risk registers
- Policy, process and control-framework development
- Gap assessments and audit-readiness support
- Prioritized remediation roadmaps and management reporting
Typical outputs: an assessment of the current state, documented gaps and risks, and an action plan with priorities and ownership agreed for the engagement.
IT Internal & External Audit
Gain a clearer view of whether your IT controls address the risks that matter. We support audit engagements with structured planning, evidence-based evaluation and practical reporting.
- Risk-based IT audit planning and scoping
- Review of IT governance, access, change and operational controls
- Evidence evaluation and control testing
- Clear findings, risk implications and recommendations
- Remediation tracking and follow-up reviews
Engagement approach: audit scope, criteria, independence requirements and reporting expectations are agreed before work begins. Consultancy and training do not themselves issue accredited certifications.
Training & Education through Horus Academy
Build the capability to sustain improvement. Horus Academy is the training brand of Horus Consultancy Inc., offering professional education across cybersecurity, governance, IT service management, business continuity, privacy and related disciplines.
Explore the Academy for current courses, delivery options and certification pathways.
How we begin
We start with your priorities: the risks you need to understand, the assurance you need to provide or the skills your team needs to develop. The next step is a clearly defined scope and practical deliverables suited to your organization.
Prefer email? info@horusconsultancy.ca
Internal Audit and External Certification Coordination
Horus Consultancy can conduct internal audits, assess readiness and help your team organize corrective actions. Where an external certification audit is appropriate, we can facilitate an enquiry and coordination with MSECB, subject to its acceptance, scope and impartiality checks.
MSECB’s public auditor profile lists Islam Elzayat in its auditor network, including experience in ISO/IEC 27001 and ISO/IEC 20000-1.
Clear roles throughout the engagement
- Horus Consultancy: the agreed consulting, readiness or internal audit work and coordination support.
- MSECB: acceptance of the certification engagement, assignment of eligible auditors, external certification assessment and certification decisions.
Consultancy and internal audit relationships must be disclosed when arranging external certification. Any external auditor assignment is subject to MSECB’s independence and conflict-of-interest requirements. Horus Consultancy does not issue MSECB certificates or guarantee certification.
For ISO/IEC 42001, the proposed service combination must be checked against MSECB’s specific conflict-of-interest restrictions before an engagement is accepted. Read MSECB’s impartiality statement.
AI Governance and Management-System Readiness
Discuss your priorities in AI governance, AI risk management, ISO/IEC 42001, information security management under ISO/IEC 27001, or service management under ISO/IEC 20000-1. We agree the applicable scope, responsibilities and deliverables before starting work.
Continue reading
- AI Governance: A Practical Starting Plan for Your Organization
- AI Risk Management: Build a Risk Register Around Real Use Cases
- ISO/IEC 42001 Readiness: From AI Policy to Evidence of Practice
- ISO/IEC 27001 Internal Audit: Preparing Evidence and Closing Gaps
- ISO/IEC 20000-1 Readiness: Connect Service Management to Evidence