ABOUT iso360
iso360 is the boutique cyber security consultancy supporting SMEs with risk, governance, and compliance.
Come to us when you want to deal with humans who respect your team and leave you with management systems and ISO standards that genuinely work for you.
A boutique cyber compliance consultancy for real people.
iso360 exists because the cyber and compliance industry needed a middle ground. Too many businesses are stuck choosing between:
- Lone consultants with decent knowledge but limited capacity, or
- Big corporates with rigid processes, sluggish turnaround times, and little connection to how SMEs actually operate.
iso360 sits in between, on purpose.
We have the experience and capacity to deliver properly, and the dynamism to flex to fit you. No prescriptive processes, no rigid workflows, no ticking boxes.
Pure human partnership and huge respect for your team and how they work.
Enhancing what you already do well so you can do more of it, rather than ripping it up and wrecking morale.
No padlocks. No scare tactics. No ticking boxes. And definitely no suits.
iso360 was founded by Gray Millen and Sharon Buck, work mates turned business partners who spent decades on the front line of audits, ISO standards, and assurance and got tired of seeing businesses left with:
- 200-page documents nobody uses
- Management systems that look good on paper but fail in practice
- Burnt-out internal teams trying to “do ISO” on top of their day jobs.
We believe compliance should feel clear and collaborative, with solutions that actually make sense to how you operate.
You feel comfortable showing up as your real selves because we do the same.
Cyber Security has a reputation for being cold,
serious, and jargon-heavy.
Almost like the system is designed to highlight everything you’re doing wrong as an organisation, an employee or a leader.
That’s so far from our approach.
We know you’ve done your best up to now and recognised the need for support to advance.
Raising the standard.
Bulldozing in with a one-size-fits-all methodology doesn’t work.
We work as an augmentation of your team, a trusted partner getting to know your people, adapting to how you operate, and learning what kind of systems and certifications will actually work for you.
Sometimes that means blending in completely, working shoulder-to-shoulder with your team. Other times it means staying visibly external – that’s your call.
Either way, the goal is the same: using compliance as a opportunity to improve how you operate so you can achieve more.
Boutique by design.
iso360 is intentionally a small, highly experienced team.
For you, this means:
- You work with the same people consistently
- You can always get hold of us
- Your project move quickly, without cutting any corners
- You enjoy a dynamic experience, rather than a prescriptive one.
Our clients often say we seem bigger than we are because of the breadth of experience, depth of knowledge, and quality of delivery we bring.
We’re also not afraid to challenge the industry itself.
Our approach is tech-first and progressive, actively pushing compliance and assurance forward through:
- Smarter use of technology and AI
- New ways of thinking about audit and assurance
- Tools and platforms that support standards in real, practical ways.
Business is in a constant state of evolution, and so are we.
Fuelled by partnership.
We work primarily with SMEs.
We are one, and we have a deep appreciation of your mindset and inner workings.
Shared experiences mean we understand the pressure, the resource constraints, the competing priorities, and the reality of wearing multiple hats.
That’s why we’re fuelled by partnership.
Clients don’t just work with us once. They take us with them when they move roles, recommend us internally, and come back when they need support again because they trust us and see the difference in what we do.
- The standard
- The audit
- The certificate
- A team that respects yours
- Honest answers, upfront
- Less stress and more headspace
- A system that actually helps your business run better.
THIS IS iso360: GRITTY, HUMAN, UNAFRAID.
If you’re looking for a cyber and digital compliance partner who makes the rules work for you, and not the other way round, you’re in the right place.