ABOUT US
Stronger security. Responsible AI. Lasting confidence.
ShieldPath Security is a UK consultancy specialising in ISO 27001 information security and ISO 42001 AI management systems. We help organisations turn complex requirements into practical ways of working.
Whether you want to pursue new contracts, meet customer expectations or strengthen governance, we work alongside your team to prepare for certification and build the knowledge, processes and confidence to maintain your management system as your business grows.
FOUNDER
Jason Williams, Founder and Principal Consultant
Jason has spent more than 20 years delivering information security, risk and compliance programmes in regulated and business-critical environments. He founded ShieldPath to give organisations senior-level security leadership without the cost of a full-time hire.
As an ISO 27001 Lead Auditor and Lead Implementer and an ISO 42001 Lead Auditor, Jason sees certification from both sides of the table: what auditors look for, and what it takes to build a management system that genuinely works. He also holds the CISSP and CISM certifications, and brings experience across NIST CSF, PCI DSS, UK GDPR, IASME Cyber Assurance and Cyber Essentials. Alongside ShieldPath, he is an assessor for Cyber Essentials, Cyber Essentials Plus and IASME Cyber Assurance on behalf of 3 Complabs UK Ltd, and the ISO Lead at Closed Door Security.
Jason works with boards and senior leadership as a virtual or fractional CISO, advising on security strategy, control design, supplier assurance and continuous improvement. He is also the architect of ReguEase, the compliance platform ShieldPath clients use to manage risk registers, Statements of Applicability and audit readiness.
WHY WORK WITH US
What makes ShieldPath different
Auditor’s eye
We build to what certification auditors actually test.
Proportionate
Documentation and controls sized to your organisation, not a 200-page template pack.
Tools included
ReguEase keeps your risk register, internal audits, risk treatment plans, CAPA records and Statement of Applicability live, not in a spreadsheet nobody opens.
Continuity
The same person from gap assessment through to certification and beyond.
Talk to us about certification
A 30-minute call is enough to tell you what certification would involve for your organisation.