Case Studies

A selection of real engagements, in clients' own sectors and words where we have them.

ISO 9001:2015 & ISO/IEC 27001:2022

KeNIC — Kenya Network Information Centre

Kenya's domain name registry ran a competitive RFP process that began with a first presentation invitation and continued for 14 months, including a formal supplier prequalification stage. Rigel was confirmed as the winning bidder, with a site visit and contract meeting held at Parklands Sports Club ahead of project kickoff.

Won a national-level IMS implementation contract (ISO 9001 + ISO/IEC 27001) after a 14-month competitive process
ISO/IEC 27001:2022

Ezra (Lendtech Services Ltd / Ezra World)

Rigel's largest and longest-running client relationship. Work has spanned the transition to ISO/IEC 27001:2022, internal audits, vulnerability assessment and penetration testing (VAPT) coordination, ongoing ISMS maintenance, and annual re-certification, certified through our partner Certi-Trust.

Multi-year recurring ISMS engagement, currently in re-certification
ISO/IEC 27001:2022

Stac AI

Introduced through an existing client referral, Stac AI signed an ISO Transition Consultancy contract and underwent a Stage 1 certification audit with Certi-Trust. Non-conformities raised at Stage 1 have been systematically resolved through corrective action.

Stage 1 audit passed; progressing toward Stage 2 full certification
ISO 9001:2015

Partec East Africa Ltd

Quality management system implementation consultancy for the Nairobi-based firm, delivered end-to-end and marked complete with the engagement invoiced.

ISO 9001:2015 implementation delivered and won
ISO/IEC 27001:2022

Sight and Sound Computers Limited (SSCL)

Active ISMS implementation client since August 2025, covering proposal, kickoff, organisational structure mapping and a shared ISMS documentation workspace with the client's compliance team.

ISMS implementation in progress, certification via Certi-Trust
Training & Risk Assessment

Novapioneer (schools network)

Delivered risk assessment training and audit work across multiple Novapioneer school campuses, with reports produced and feedback incorporated directly into the client's own risk register.

Multi-site risk assessment and training programme delivered
Data Protection

MGI Adam & Partners

Delivered Data Protection Act training and drafted a data privacy policy for the certified public accountants firm. The client's own words on the session: “We appreciate the professionalism and clarity with which you delivered the session.”

Training delivered and privacy policy drafted
ISO 9001:2015

CoviPharm

ISO 9001:2015 documentation workshop delivered over two full working days on-site, built around the client's own operational documents rather than a generic template.

Documentation workshop delivered on schedule

Want to be our next case study?

Tell us about your organisation and the standard you're working toward.

Book a Free Consultation