ISO · GRC · Training

Get certified. Manage risk with confidence. Build a compliance culture that sticks.

Rigel Kenya guides organisations across Kenya and East Africa through ISO certification, risk & compliance (GRC) advisory, and hands-on staff training — from the first gap assessment to the certificate in hand.

80+Organisations advised
5ISO frameworks covered
East AfricaClients across the region
Rigel Kenya consultants reviewing a client's risk documentation
What we do

Three ways we help your organisation stay compliant and resilient

Whether you need a certificate, a framework, or a trained team — we scope it around your business, not a template.

☰

ISO Certification

End-to-end support for ISO 9001 (Quality), ISO/IEC 27001 (Information Security), ISO 22301 (Business Continuity), ISO 45001 (OH&S) and ISO 14001 (Environment) — gap assessment through to certification audit.

🔐

Risk & GRC Advisory

Risk assessments, Data Protection Impact Assessments (DPIA), internal audits, business continuity planning and policy development tailored to your regulatory environment.

🎓

Training & Academy

PECB-aligned Lead Auditor and Lead Implementer courses, plus in-house workshops on risk, data protection and management-system awareness for your whole team.

Trusted by

Organisations that have worked with Rigel Kenya

KeNICEzra / LendtechStac AIPartec East Africa SSCLNovapioneerCoviPharmMGI Adam & Partners
Proof, not promises

Recent engagements, real outcomes

ISO 9001 & 27001

KeNIC

A 14-month RFP process for Kenya's domain registry ended in an award letter: Rigel will implement an integrated ISO 9001:2015 and ISO/IEC 27001:2022 management system.

Contract won after competitive national tender
ISO/IEC 27001

Ezra (Lendtech Services)

Rigel's longest-running client: transition to ISO/IEC 27001:2022, internal audits, VAPT coordination, ISMS maintenance and annual re-certification.

Multi-year recurring engagement, certified via Certi-Trust
ISO/IEC 27001

Stac AI

ISO/IEC 27001:2022 transition and integration consultancy. Stage 1 certification audit passed, with corrective actions progressing toward full certification.

Stage 1 audit passed
How we work

A clear path from first conversation to certificate

Scope & gap assessment

We review your current processes against the standard you need and identify the real gaps — not a generic checklist.

Build the framework

We help you write the policies, procedures and risk documentation the standard requires, sized to your organisation.

Train & implement

Your team is trained to run the system day-to-day, with internal audits to confirm it's working before the real one.

Certification audit

We coordinate with accredited certification bodies through Stage 1 and Stage 2 audits, and support you at re-certification.

“We appreciate the professionalism and clarity with which you delivered the session.”

MGI Adam & PartnersData Protection Act training & policy drafting

Ready to start your certification journey?

Tell us what standard you're working toward — we'll reply with a clear next step, not a sales pitch.

Book a Free Consultation