One programme.
Your obligations in one place.
Governance, Risk & Compliance (GRC) connects your privacy, information-security and risk obligations into a single, reviewable programme. This service line is available now.
What the GRC programme covers.
- Risk assessment and risk register
- Policy and control framework
- Compliance mapping across NDPA, ISO 27001 and sector rules
- Internal control reviews and audit readiness
- Board and management reporting
GRC programme pricing.
GRC programme — fixed-fee quote within 1 business day.
Prices exclude 7.5% VAT and NDPC filing fees, which are paid to the Commission. Every quote confirms scope, deliverables and timing in writing.
From first call
to a running programme.
Assessment
A short scoped call to confirm your obligations and current arrangements.
Design
We agree the GRC scope, roles and the register of obligations.
Implement
Controls, evidence and reporting are put in place with owners.
Review
A defined review cycle keeps the programme current.
Before you engage.
How is GRC different from CAR filing?
The CAR is an annual NDPC return. A GRC programme is the wider governance, risk and compliance structure that supports it and your other obligations. They can run together.
Do you certify compliance?
No. Supreme does not certify compliance. Your obligations are set by the NDPA and NDPC directives.
Start with a consultation.
A short, fixed-scope conversation that scopes your GRC programme.