# 3FACTOR

> Boutique cybersecurity consultancy delivering vCISO leadership, compliance certification (SOC 2, ISO 27001, PCI DSS, Cyber Essentials), AI governance, and cyber strategy for SaaS, fintech, and enterprise teams worldwide.

3FACTOR is a senior-led advisory firm. Every engagement is fixed-scope and delivered by experienced practitioners — no junior hand-offs. We help companies pass audits, secure enterprise deals, and mature their security program.

## Services
- [Virtual CISO (vCISO)](/services/vciso): Fractional CISO leadership, board reporting, and program ownership.
- [SOC 2 Certification](/services/soc-2): Type I and Type II readiness and audit support.
- [ISO 27001 Certification](/services/iso-27001): ISMS design, implementation, and certification.
- [PCI DSS Compliance](/services/pci-dss): Cardholder data environment scoping and PCI DSS v4 readiness.
- [Cyber Essentials](/services/cyber-essentials): UK Cyber Essentials and Cyber Essentials Plus certification.
- [Regulatory Compliance](/services/regulatory): DORA, NIS2, GDPR, and sector regulation mapping.
- [AI Governance](/services/ai-governance): ISO 42001, NIST AI RMF, and EU AI Act readiness.
- [Cyber Strategy](/services/cyber-strategy): Security strategy, target operating model, and roadmap design.
- [Vendor Risk Management](/services/vendor-risk): Third-party risk programs and due diligence.
- [Cyber Maturity Assessment](/services/cyber-maturity-assessment): NIST CSF-based maturity benchmarking.
- [Cyber Maturity on AWS](/services/cyber-maturity-aws): AWS-specific security posture assessment.

## Pages
- [Homepage](/): Overview of 3FACTOR's services and approach.
- [About Us](/about-us): Team, credentials, and global coverage.
- [Contact](/contact): Get in touch for a scoping conversation.

## Resources
- [SOC 2 vs ISO 27001](/resources/soc-2-vs-iso-27001): When to choose each framework.
- [vCISO vs Full-Time CISO](/resources/vciso-vs-full-time-ciso): Cost, scope, and fit comparison.

## Industry pages
- [SOC 2 for SaaS](/soc-2-saas)
- [SOC 2 for Fintech](/soc-2-fintech)
- [ISO 27001 in the UK](/iso-27001-uk)

## Optional
- [Privacy Policy](/privacy)