About Us
A senior-practitioner GRC firm.
Semper Sec designs, implements, and helps operate governance, risk, and compliance programs for enterprises. We work on the people, process, and governance layer that turns scattered compliance activity into one capability the business can run and trust.
Why Semper Sec exists.
Organizations usually know what they need to achieve. What is missing is the governance, ownership, process, and operating discipline to sustain it. Obligations grow faster than the operating model behind them, and the work spreads across teams, tools, and frameworks that were never designed to run as one. Closing that gap is the whole of what we do.
Our mission.
To guide organizations through security and compliance so obligations are met, risk is visible, and leadership can make decisions with confidence. We measure that by whether a program still runs after we hand it over, not by the size of the report we leave behind. Why Semper Sec →
How we operate.
Four commitments shape every engagement, and they are the reason our work holds up between audits.
Senior-practitioner model
Experienced practitioners lead engagements rather than just scoping and reviewing them. The people who plan the work are the people who do it.
Programs, not projects
We build an operating capability designed to keep running after the engagement and to transfer cleanly to your team when that is the goal.
Independent by design
We do not resell the platforms we recommend, and we do not independently audit programs we helped build. Those boundaries protect both your assurance and our advice.
One delivery method
Assess, Design, Implement, Operate, Improve. Every engagement runs the same lifecycle, so discovery, build, and operation connect instead of restarting.
How we hold ourselves to the same standard.
We ask clients to run their obligations as a program, so we run ours the same way. Our certifications, security and privacy practices, and independent audit status are published in the Security Trust Center, with supporting documentation available on request.
Explore Semper Sec.
The team behind the work, how to join it, and how to reach us.
Leadership
The founders, directors, and senior practitioners who lead our engagements.
Start with the program, not the framework.
Talk with a senior advisor about the decisions, ownership, and operating capability your organization needs next.
A conversation with a senior practitioner, not a sales gatekeeper.