ISO/IEC 27001:2022
Establish or strengthen an information security management system, including information risks, responsibilities, controls and continual improvement.
View the ISO standardIT governance · Information security · Data protection
Qevon helps organisations connect information security, privacy responsibilities and operational controls through a practical, risk-based management system.
Frameworks for information and privacy
Frameworks depend on where an organisation operates, whose data it handles and what it does with that data. Qevon scopes the work around that context.
Establish or strengthen an information security management system, including information risks, responsibilities, controls and continual improvement.
View the ISO standardPlan for the Nigeria Data Protection Act 2023 and the NDPC’s GAID 2025. Review the earlier NDPR 2019 where legacy or transitional obligations are relevant.
View NDPC resourcesReview privacy and data-handling controls against the GDPR where its territorial scope applies to the organisation’s activities.
Read the EDPB overviewPractical governance and controls
A useful programme connects policy and technology to ownership, daily practice and evidence that can be reviewed.
Define scope, information risks, policies, responsibilities and proportionate controls for the organisation.
Map personal-data handling and organise privacy responsibilities, records, retention and response processes.
Support internal review, corrective action, awareness and management oversight so the system can improve over time.
Qevon provides management-system and readiness support. Legal interpretations, statutory filings and independent certification are confirmed with appropriately qualified or authorised providers where required.
Discuss your organisation
Share the standards, data risks and customer or regulator expectations you are working through.