Simple RFFR help for policies, ISO 27001, Microsoft 365, and your IT team
Government service providers must protect data and systems. Right Fit For Risk (RFFR) compliance helps them do this. RFFR is not just paperwork. Your rules and security controls must work. You also need proof.
Forde Consulting makes RFFR easier. We help you plan and build your program. We can guide a self-assessment. We can also prepare you for an outside audit. Your IT team or MSP can work with us.
RFFR needs more than an ISO 27001 certificate
RFFR is a security program run by DEWR. It helps protect DEWR data and systems. It works with ISO 27001. You may also need to meet other government security rules. You must show that your controls work.
You may complete a self-assessment. You may also use an outside certification body. We help you choose the right option. We set the scope, find gaps, and list the next steps. The plan will fit your needs.
RFFR help from start to finish
We look at people, work steps, and technology. First, we review your current setup. Then we give you a clear RFFR action plan.
Policies and security documents
We write clear documents for your team. These may include security policies and a risk register. We can also prepare plans for incidents and major outages. Other work may cover assets, suppliers, audits, and management reviews. We can prepare your RFFR Statement of Applicability too.
Microsoft 365 security configuration
Good policies need strong security settings. We can review Microsoft 365. We can also set up Entra ID, Intune, Defender, and Purview. This work may include safer sign-in, secure devices, email protection, data labels, logs, and file sharing. We also collect proof for the audit.
Working with your IT team or MSP
You can keep your current IT partner. We give RFFR and ISO 27001 advice. Your IT team or MSP can make the changes. We turn each control into a clear task. We check the settings and proof. We also record who owns the work.
Help with checks and audits
For a self-assessment, we explain each rule. We test your controls and gather proof. We also help you write clear answers. For certification, we prepare you for the audit. We help fix gaps and support your team. The outside certification body makes the final decision.
Why choose Forde Consulting?
- Clear advice: We know RFFR, DEWR, and ISO 27001.
- One plan: We link policies, security settings, and proof.
- Flexible help: We can lead the work or support your IT team.
- Useful controls: We protect data without slowing your team.
- Ongoing help: We support audits, reviews, and fixes.
Build an RFFR program that works
RFFR should make your business safer. It should not create more paperwork. We bring your policies, risks, Microsoft 365 security, and audit work into one plan. You get clear tasks, strong controls, and better proof.
Need help with RFFR or ISO 27001? Contact Forde Consulting. We can review your gaps and give you a clear plan.