True North PSR
Privacy. Security. Direction.
Assurance, recalibrated.
True North offers privacy and information security advisory services for data-driven businesses.
With practical, principles-based knowledge, your organization can achieve regulatory and industry best practices, and reach a state of harmony with your customers, investors, and other interested parties.
It’s our job to help you chart that course.
Our Philosophy
Sadly, even the savviest organizations feel overwhelmed when tackling data privacy and information security problems. Why? Because most privacy and security 'gurus' overcomplicate everything. Like Einstein said, "if you can't explain it simply, you don't understand it well enough."
Our philosophy is simple: Distill the message. Speak plainly. Be human.
True North advisors are plainspoken. We deliver intelligent solutions - not unnecessary technical jargon.
How do we do that? We developed a broad range of expertise (see below), kept what works, and discarded the rest.
Our Credentials
Consultation& Advisory Services
Risk Management
We benchmark your current state privacy posture against the regulations (e.g., PIPEDA, GDPR) and standards (e.g., SOC2, ISO) pertinent to your business.
After that assessment, we identify and rank your data processing risks to provide you with a set of tailored recommendations to fortify your position.
Governance & Compliance
We integrate privacy and security governance structures into your business processes so your company achieves privacy and security "by design."
How? By developing your organization's policies & procedures, internal controls, standards of practice, and other risk management & IS audit management capabilities.
If you choose to walk this path with us, you won't have to rely on good luck and charisma to try and talk your way through compliance audits. Instead, you will have confidence. You will have proof.
Clarity +
Confidence
= Innovation
Employee Training
Your staff is your biggest liability. But they can also be one of your biggest assets!
We offer training options to help you improve your employees' understanding of your privacy and security policies and procedures, ensuring they understand their accountability in protecting your company's data.
We also offer multi-day training for your employees to help them attain relevant industry certifications, including:
-
IAPP: CIPP/C, CIPP/US, CIPP/E
-
IAPP: CIPT, CIPM
-
ISACA: CRISC, CISA, CISM
-
PMI: PMP
Process Improvement
Improve your operations responsibly.
With an objective lens, we'll help you update your organization’s procedures and controls based on the insights and data that are too close for you to see clearly.
Your systems should be simple, efficient, and effective without compromising your company or your clients.
True North offers the following process improvement services:
-
Business process design and improvement
-
Policy and procedure design and improvement