Enterprise governance capability—made practical for growth-oriented SMEs.Take the readiness snapshot
Platform

A living operating system for trust.

IQX connects risk intelligence, governance automation, operational evidence and assurance in one traceable architecture.

Core modelRisk → Control → Evidence → Outcome
StandardsNIST · ISO · POPIA · GDPR
Designed forIncremental SME adoption
Four connected layers

Every obligation becomes something the business can operate.

The platform translates external expectations into owned controls, repeatable work and evidence that can be reviewed over time.

01

Risk Intelligence

Assess cyber, AI, operational and insurer readiness. Convert responses into scored gaps, treatment priorities and a structured risk view.

NIST cyber assessmentAI riskinsurer readinessrecommendations
02

Governance & Control Automation

Map findings to standards, policies, controls, owners, reviews, attestations and management workflows—without hard-coding each framework into a separate tool.

ISO 9001ISO 27001ISO 8000ISO 42001POPIAGDPR
03

Operational Execution & Evidence

Connect governance requirements to the systems where work happens. Capture approvals, records, logs, training, reviews and incident data as evidence of execution.

HRIAMITSMERPCRMsecurity tools
04

Assurance & Continuous Improvement

Present current posture, control effectiveness, evidence coverage and improvement actions to management, boards and independent trust stakeholders.

audit readinesscertificationinsuranceboard reporting
The control spine

Traceability is the platform’s organising principle.

A strong governance system must show why a control exists, who owns it, how it operates and where the evidence lives.

01Risk
02Control
03Policy
04Process
05Evidence
06Assurance outcome

Evidence flows up. Requirements flow down.

Risk assessments define what must be controlled. Governance workflows define how it should operate. Operational systems prove what actually happened.

See the model applied
Multi-standard governance

Reuse capability across frameworks.

IQX is designed to reduce duplicated effort by allowing related obligations to share controls, evidence and ownership.

ISO 9001

Quality management

Process consistency, customer focus, corrective action and continual improvement.

ISO 27001

Information security

Risk-based security controls, ownership, evidence and management oversight.

ISO 8000

Data quality

Trusted data definitions, accountability, quality controls and measurable improvement.

ISO 42001

AI management

AI policy, accountability, lifecycle controls, risk treatment and responsible use.

NIST CSF

Cyber resilience

Identify, Protect, Detect, Respond, Recover and Govern-aligned posture management.

POPIA

Privacy governance

Structured accountability, data handling controls and supporting evidence.

GDPR

Data protection

Governance mapping for organisations operating in applicable regulated contexts.

Custom

Industry controls

Extend the control library with customer, supplier, sector or insurer requirements.

Operational integration

Evidence from the systems where the business works.

IQX’s integration layer is designed to collect or reference evidence without forcing operational teams to duplicate their work in a governance tool.

HR & people
Identity & access
IT service management
ERP & finance
CRM & customer ops
Security monitoring
Documents & records
Training systems
Vendor management
Incident & change
Built to evolve

From assessment application to business trust infrastructure.

The architecture supports a phased path: begin with risk and reporting, then extend into evidence, standards automation, partners, benchmarking and continuous assurance.

Secure by design

Tenant-aware architecture, role-based access, audit logs and protected evidence are core design principles.

Integration-ready

API and connector patterns support HR, IAM, ITSM, security and document ecosystems over time.

Benchmark-ready

Versioned scoring and anonymised cohort design can support responsible comparative insight as data maturity grows.

See the platform in context

Map your current tools, standards and assurance priorities.

We will identify the most practical entry point and the capabilities that can be reused as your governance scope expands.

Book a platform conversation