Skip to content

Consultancy & Audits

Data Protection Consultancy & Audits – Risk assessment, gap analysis, remediation

A practical data protection consultancy and independent audit.

We partner with organizations to identify gaps, manage risks and demonstrate compliance with the Kenya Data Protection Act (2019) and International best practice.

What we offer

End to End advisory and assurance services for data protection.

Data Protection Gap Assessment

Comprehensive reviews of policies, processes, systems and evidence mapped to the Kenya Data Protection Act (2019) and best practices controls.

Executive summary and Heat map.

Prioritized remediation plan.

Board ready Report

Independent Data Protection Audit

Third party audits to evidence, compliance, prepare for regulatory engagement or support bids and tenders

Control testing and sample checks

Findings, observations and remediation tracking.

Audit Certificate..

Data Protection Impact Assessment (DPIAs)

Risk-based assessments for high risk processing with practical mitigations and residual risk scoring.

Risk registers and control recommendations.

Stakeholders briefings

Template DPIA documentation

Vendor and Processor Due Diligence

 

Assessment of third party risks, DPIs and transfer mechanisms to secure data sharing arrangements.

 

 

 

 

 

Breach Preparedness and Response.

Incident playbooks, table top exercises and notification templates aligned to ODPC expectations.

 

 

 

Policy, Process and Training

Custom policies, staff training, (including frontline guards and reception) and awareness materials.

 

 

 

Our Approach

01 Assess – Interviews, document review and sample testing to map maturity and risks

02 Design – Control design, policies and remediation planning tailored to your environment.

03 Implement – Support for technical and organizational remediation and training delivery.

04 Monitor– Outgoing assurance, KPIs and audit readiness checks

Deliverables

  • Audit report with findings, risk ratings and remediation roadmap.
  • Board ready executive summary.
  • DPIA reports and templates.
  • Policy suite and training materials.
  • Remediation support and verification.

Delivery

Packages

Starter

Basic gap assessment + Executive summary  

Corporate

Audit, controls testing and ongoing support.

SME

 Full assessment + remediation plan + training

Enterprise (custom)

Tailored scope with SLA and retainer options

 

Contact

Tel. +254 718 770 959

Email: info@cadtech-services.co.ke

Nairobi, Kenya

Email us and tell us about your needs.

Quick facts

Jurisdiction

Kenya Data Protection Act (2019)

Regulator

Office of the Data Protection Commissioner (ODPC)

Delivery

On-Site/Remote

Output

Audit Report, Remediation Plan

Cadtech Training

Cadtech Training [Training and Coaching Solutions]

Empowering teams with skills to manage information, ensure compliance, and drive digital transformation.

Cadtech Consultancy

Cadtech Advisory [Consultancy and Audit Solutions]

Strategic expertise to ensure compliance, efficiency, and competitive advantage

Cadtech Digital

Cadtech Digital

Smart, scalable digital systems for managing and securing your information assets..

Cadtech Disposal and shredding

Cadtech Disposal

Certified destruction to safeguard confidentiality, compliance, and peace of mind.

@2025CadtechServicesLtdKenya