Solutions
Five service areas, one goal: a management system your organisation can run, certify, and keep improving.
End-to-end ISO framework implementation
We take you from gap assessment to certificate across the standards Kenyan and East African organisations ask for most.
ISO 9001 — Quality Management
Build a quality management system that reduces rework, improves customer satisfaction and meets procurement/tender prequalification requirements.
ISO/IEC 27001 — Information Security
Our most-requested standard. Information security management system (ISMS) design, risk treatment, VAPT coordination and certification support, including transitions to the 2022 revision.
ISO 22301 — Business Continuity
Business continuity management frameworks, in partnership with the Business Continuity Institute, so your organisation can keep operating through disruption.
ISO 45001 — Occupational Health & Safety
Workplace safety management systems that protect your people and meet client and regulatory expectations.
ISO 14001 — Environmental Management
Environmental management systems for organisations with sustainability commitments or environmental compliance obligations.
Transition & re-certification
Already certified? We support standard revisions (e.g. the ISO/IEC 27001:2022 transition) and manage your annual surveillance and re-certification audits.
Governance, risk and compliance that fits how you actually operate
Risk Assessment & Analysis
Comprehensive risk assessments covering operational, financial, compliance and reputational risk, with practical, prioritised mitigation plans — not just a register nobody reads.
Data Protection Impact Assessments (DPIA)
DPIAs and data privacy policy drafting aligned to Kenya's Data Protection Act, for organisations handling personal data at scale.
Business Continuity Planning
Crisis management and business continuity plans that are tested, not theoretical — including crisis simulation training.
Policy Creation & Advisory
Clear, workable policies and procedures that satisfy auditors and your own team equally — tailored to your sector and regulatory environment.
Know where you stand before the certification body does
Our auditors use a risk-based approach to test whether your management system is actually working, with actionable findings — not a pass/fail checkbox exercise. We also provide auditor resourcing: Rigel consultants have served as contracted lead auditors on third-party audit teams.
Need staff trained on a standard, not just certified against it?
Our Academy runs PECB-aligned Lead Auditor and Lead Implementer courses alongside in-house awareness training.
Not sure which standard you need?
Tell us about your sector, your clients' requirements, or your upcoming tenders — we'll recommend the right starting point.