Risk Crew is a product-agnostic information security consultancy headquartered in London that serves customers across Europe. The company provides governance, risk and compliance (GRC) management services alongside security testing capabilities. The company's GRC services include ISO 27001 compliance, ISO 42001 compliance, SOC 2 compliance, DORA compliance, NIS2 compliance, Cyber Essentials certification, Data Protection Act 2018 compliance, and PCI compliance. They offer information security risk assessments, information security policies development, incident response management, ransomware readiness assessments, cyber supply chain risk management, DPO as a Service, and Virtual CISO services. On the security testing side, Risk Crew conducts application security testing, blockchain security testing, red team testing, network penetration testing, web application penetration testing, physical penetration testing, social engineering testing, IoT penetration testing, security vulnerability assessments, mobile application security testing, and cloud penetration testing. The company also provides information security eLearning courses for staff training. Risk Crew positions itself as a consultancy that creates pragmatic, risk-based security programs tailored to client needs. Their services are designed to meet audit-specific controls for various compliance frameworks including PCI, ISO, and DPA standards.