Packet Secure
Governance, risk and compliance services — ISO/IEC 27001 readiness, information security audit, penetration testing, security operations and governance frameworks.
Advisory delivered by practitioners
Six service lines, contracted individually or as a combined programme, delivered by certified practitioners with operational infrastructure experience.
ISO/IEC 27001 readiness and implementation
Gap assessment, management system design, risk assessment and treatment, Statement of Applicability, policy development, internal audit and management review, through to the certification body’s Stage 1 and Stage 2 audits.
Information security audit
Independent audit against a defined framework, covering control effectiveness and evidence review, with findings assigned severity and ownership and a remediation plan scoped to the client’s operational capacity.
Penetration testing
Scoped and authorised testing of infrastructure, web and API environments, reported for both engineering remediation and executive review. A licensable service under Act 854.
Security operations
Monitoring, detection and incident response delivered as a managed service. A licensable service under Act 854.
AI governance frameworks
Model inventories, acceptable-use policy, data-handling controls and audit evidence for organisations deploying AI — aligned to ISO/IEC 42001 and the client’s regulatory obligations.
Governance, risk and compliance advisory
Enterprise risk registers, control mapping across frameworks, third-party risk assessment, board-level reporting and structured audit-readiness programmes.
Independence in assurance
The practice provides consultancy and readiness services toward ISO/IEC 27001 and does not act as a certification body.
Under ISO/IEC 17021-1, certification is undertaken by an accredited certification body that is independent of the organisation which implemented the management system. Our role is implementation, internal audit and evidence preparation, and support through the certification audit conducted by the client’s appointed body.
Penetration testing and managed security operations are licensable services in Malaysia under the Cyber Security Act 2024. Packet Labs delivers services in these categories in accordance with that framework, and publishes its licence status.
Developing client capability
Where an audit identifies a capability gap rather than a technical one, Packet Academy delivers the corresponding training programme.
Remediation frequently depends on the client’s own technical capacity. Packet Academy provides structured training in information security management, secure operations and internal audit, delivered by the same practitioners who conduct the engagements.
For Malaysian employers, these programmes are intended to be claimable against the HRD Corp levy following Training Provider registration.
Discuss an engagement
Certification programmes, audit, penetration testing, security operations and AI governance, scoped against your compliance and operational requirements.