Consultancy engagements are structured assignments with a defined scope, a timeline and a deliverable. We come in, examine how the organization actually operates — as opposed to how the policy manual says it operates — and give you a plan that can be implemented by the people you already have.
The gap between the documented process and the real one is where most compliance risk lives. Finding it requires being in the building and asking uncomfortable questions.
Consultancy work means access to information organizations do not share lightly — personnel files, board papers, incident records, contracts.
Every assignment runs under a written confidentiality agreement signed before fieldwork begins. Where the work involves personal data, we act as a processor on your written instruction, and the terms of that processing are set out in the engagement letter.
Botswana's Data Protection Act No. 18 of 2024 came into force on 29 October 2024, replacing the 2018 Act. Most organizations in Botswana have not yet worked through what it requires of them. We audit what personal data you hold, why you hold it, who you share it with, and what you need to change — and we help you build the records to prove it.
We agree what is in scope, what is out, what we will need access to, and what you will receive. Written and signed before work starts.
Document review, interviews with the people doing the work, and observation where relevant.
What we found, in order of risk, with the evidence for each.
A prioritised plan — what to fix first, what can wait, what is not worth fixing.
A working session with the people who have to implement it, because a report nobody understands changes nothing.
