Your supervisor requires information security
Show controls that work every day and keep them ready for any review.
Let's talk about your case →Technology with expert judgment
GT brings together technology, method and operations
We combine consulting, cybersecurity, IT operations, auditing, automation and training so your organization moves forward with more control.
Pick a step of the cycle
- 17 yearssupporting more than 850 companies.
From Medellín - Colombia to the world. 
ISO/IEC 27001 · IQNetISO/IEC 27001 certifiedin our own operation- One accountable teamStandards, security and operations with the same team.
Getting certified is the easy part. Sustaining the system is the real challenge.
Earning the certificate is a milestone. The hard part is sustaining it: keeping controls alive and evidence up to date. That is why we do not stop at implementing: we operate with you, every day.
- A clear path, from diagnosis to operation
- One team answers for everything
- Audit-ready evidence, every day
Some of our clients
XM
Colanta
RUNT
Termocandelaria
Bogotá Chamber of Commerce
Medellín Chamber of Commerce
Global MVM
Enterdev
Anthesis
HeinsohnWhat we do
Five services, one path
ISO 27001 consulting and auditing, cybersecurity and SOC, IT operations, AI automation and training.
01
Consulting and auditing
We have spent months on documentation and the certification is not moving forward. A standard is implemented by operating, not by documenting.
See service →02Cybersecurity and SOC
If we were breached today, I do not know how long it would take us to find out. Continuous monitoring and response, with owners defined in advance.
See service →03IT business operations
My team is always putting out fires and never moves forward on what matters. Servers, networks, backup and help desk under a single accountable team.
See service →04Automation and AI
We hire people for tasks the system should handle. Automation on what you already have, measured in hours given back.
See service →05Training and talent
We depend on a third party every time we need to audit. Your own team, certified and able to sustain the system.
See service →What we solve
Which of these situations is yours?
Pick the one that looks most like you.
I need to get certified or renew a standard
An authority, a client or a tender requires it, and the clock is ticking.
See how we solve it →I want to protect my operation from an incident
Today you could not say how long it would take you to find out about a breach.
See how we solve it →I am already certified and struggle to sustain it
Every audit is a race to gather evidence.
See how we solve it →My IT team is always putting out fires
Infrastructure eats the time that should go to what matters.
See how we solve it →The underlying problem
One vendor implements, another protects, another operates… and nobody answers for the full result
Today in many organizations
1One vendor implements the standard
2Another looks after security
3A third runs the infrastructure
Three contracts, three contacts and nobody accountable for the full result.
With GT Consulting we answer for…
Un solo equipoImplements, audits, protects and operates.
The standardSecurityOperationsEvidence ready for an audit
One contact, one path and evidence ready for any audit.
Our platform
KORA: your compliance up to date, with no rush before every audit
KORA brings your controls, risks and evidence together in one place and shows you what is overdue. It is the tool we work with, and you can use it too.
- Controls and risks with an owner and a date
- Evidence stored and ready to audit
- Alerts for what is due and for pending actions
How we work
A four-step path, with a clear deliverable at each one
We build the path, support the execution and leave you able to sustain the result.
1. Understanding
Context, maturity, priorities and real scope.
You get: diagnosis2. Design
Path, controls, owners and indicators.
You get: work plan3. Operation
Support, follow-up and response.
You get: a running system4. Evolution
Automation, measurement and continuous improvement.
You get: indicators and improvementWhy GT Consulting
Six reasons to trust us with your operation
The power lies in people and in how we mesh processes with others.
17
17 years of experience
Since 2009 we have worked with organizations that cannot stop.
Certified in what we implement
We hold ISO/IEC 27001 in our own company.
1
One accountable team
Standards, security and operations with the same team.
Our own platform, in production
KORA keeps everything recorded and ready to audit.
Experience in critical sectors
Energy, food, technology, banking and transport.
A close team
You talk to people on the technical team, not to a form. We explain things in plain language.
When the requirement comes from outside
If an authority or a client requires a standard, we help you get there on time
You need ISO/IEC 27001 certification to operate
We start with a diagnosis and agree with you on a realistic date to get certified.
Let's talk about your case →Your supervisor asks you to manage risks and prove it
Including money laundering and terrorism financing: every risk with an owner, a treatment and evidence.
Let's talk about your case →Sectors where we already work:EnergyFoodTechnologyBankingTransport
About us
Seventeen years sustaining operations that cannot stop
Since 2009 we have supported organizations so that getting certified does not mean being left alone after the certificate.
G
GuidanceProcesses, methodologies, punctuality and a path marked by experience.
T
TransformationInnovation and technology, one step at a time and with agility.
C
KnowledgeTrack record, advice, empathy and synergies between people.
17years since 2009
+850companies supported
8ISO standards we support
1accountable team
MC
Co-founder and CEO
María Clara López Gómez
Systems engineer and project management specialist, with more than 25 years in business leadership, IT governance, risk and cybersecurity.
ND
Co-founder and CTO
Norman Darío Higuita Montoya
Systems engineer with a track record in architecture, infrastructure, cloud, security, automation and AI.
Certifications and allies
Backing you can verify
ISO/IEC 27001 · IQNetCertified information security management system.
ANDI del FuturoEntrepreneurship and Acceleration Chamber.
Scale Up 1Recognition of acceleration and growth capabilities.
Corporate ReadinessReadiness for high-value business relationships.
Allies and initiatives
Certiprof
Compra lo Nuestro
CO ColombiaWhere we work
Pick the sector or type of work closest to yours
On each card you can see the standards we support.
By sector
- SectorEnergy
Management and security systems for operations that cannot stop.
- ISO 55001
- ISO/IEC 27001
- SectorFood
Standards and controls sustained with up-to-date evidence, on the plant floor too.
- ISO 9001
- ISO 14001
- SectorTechnology
Information security and IT operations for companies that live off their platform.
- ISO/IEC 27001
- ISO/IEC 42001
- SectorFinancial
Risks and controls your supervisor can review any day.
- PCI DSS
- ISO/IEC 27001
- Risk management
- SectorTransport
Continuity and traceability in distributed operations.
- ISO 22301
- ISO 9001
By type of work
- Type of workCertification
From gap to closure: a standard is implemented by operating, not by documenting.
- ISO 9001
- ISO 14001
- ISO 22301
- ISO 20000
- ISO/IEC 27001
- Type of workCybersecurity
Continuous monitoring and response, with owners defined in advance.
- ISO/IEC 27001
- PCI DSS
- SIEM
- Type of workIT operations
Servers, networks, backup and help desk under a single accountable team.
- ISO 20000
- ITIL
Named case studies are published only with the client's express authorization.
Frequently asked questions
Clear answers before you start
Cannot find your question? Write to us and we will answer.
How do I start?
With a diagnosis of your challenge: a conversation with a technical and business focus where we review your situation and propose the next step. Request it through the form on this page or by WhatsApp.
Which standards and frameworks does GT Consulting support?
We support ISO 9001, 14001, 22301, 20000, 27001, 29110, 42001 and 55001; PCI DSS; CMMI DEV and SVC; SG-SST; ITIL; TOGAF; IT4+; Agile and Scrum. We start with a maturity diagnosis and a gap-closing path with owners and visible follow-up.
Does GT perform internal audits and support the certification audit?
Yes. We perform internal audits under ISO 19011 and support the organization during the certification body's audit. GT Consulting does not issue the certificate: we prepare the system, the evidence and the team.
How much does it cost and how long does it take?
It depends on the scope and maturity of your organization. That is why we start with a diagnosis: it defines scope, plan and investment before you commit.
What is KORA and who uses it?
KORA is our compliance platform, already in production. It centralizes controls, risks, evidence, actions and indicators to maintain traceability. Our consultants and the organizations we implement with it use it. You can request a demo.
Do I need to hire GT to use KORA?
KORA has its own website and its own sales team. If you also need consulting to implement the standard, GT Consulting supports you and leaves the work traceable on the platform.
What does IT infrastructure operation include?
Cloud and on-premise servers, monitoring, maintenance, storage, backup and recovery, networks, inventory, help desk, security and continuity. The scope is designed according to how critical each operation is.
Can I hire a service on its own?
Yes. Each service can start with a specific scope. When the challenge requires it, we connect consulting, auditing, security, operations, automation and training under a single path.
Is your organization ready to sustain its system?
Tell us your challenge →Let's talk
Bring us your challenge. Tell us what you need to solve
Someone from our team will answer you, not a form.
- 1You tell us your challenge
- 2We review it with you
- 3We propose the next step:Scope, plan and, if it applies, a KORA demo.
Book a conversationPick the time that suits you best.