News release
KIASA completes an independent security audit of its managed services
A twelve-month examination of the controls that protect the platforms KIASA runs for its clients found no exceptions. Clients can read the full report.

LONDON, September 10, 2026: KIASA today announced that its managed services practice has completed an independent audit of its security controls, covering the twelve months to the end of July 2026. The examination, carried out by Ashgrove Assurance, an independent audit firm, tested 94 controls across the 31 client platforms KIASA runs, and reported no exceptions.
The audit looked at how KIASA's teams operate, not only at what its policies say. Auditors sampled real changes, incidents, access requests and recovery tests from across the year, and checked the evidence behind each one.
What was examined
- Access: who can reach client systems, how access is granted and removed, and how often it is reviewed.
- Change: how every change to a client platform is proposed, reviewed, tested and recorded.
- Incidents: how problems are detected, escalated, resolved and explained to clients afterwards.
- Recovery: whether backups can be restored, and how long a full recovery takes in practice.
- Suppliers: how the third parties KIASA relies on are chosen, reviewed and monitored.
“Clients trust us with the systems their business runs on. They should not have to take our word for how we look after them. Now they can read an independent account of it, control by control.”
What it means for clients
Clients of KIASA's managed services, including the new KIASA Canopy service, can request the full report under a confidentiality agreement. It will be renewed every year, and future reports will extend the scope to KIASA's own internal systems.
“An audit with no exceptions is a good day, but the real value is in the discipline it takes to get there every single day. We will publish the result each year, whatever it says.”
About KIASA
KIASA is an independent technology consultancy. We design, build and run digital systems alongside the people who will own them, for clients in insurance, energy, healthcare, logistics, the public sector and other industries. Founded in London in 2012 and owned by the people who work in it through its partners and an employee ownership trust, KIASA has 420 people in eight studios across Europe and Africa, North America and Asia Pacific. Visit kiasa.tech to learn more.
The audit
Twelve months, tested
- 94
- Controls tested, from access reviews to full recovery tests.
- 31
- Client platforms in scope, across four industries.
- 0
- Exceptions reported by the auditors.
- 12 months
- Of evidence examined, to the end of July 2026.
Independent audit report on KIASA managed services, September 2026.
Related
Read more on this
Capability
Cybersecurity
Security designed in from the first sketch, and tested the way an attacker would.
Research report
Security debt: the quiet risk on the balance sheet
Unpatched systems behave like unpaid loans: the interest compounds.
Capability
Managed Services
A standing team that runs, secures and improves what has been built.
Practice
KIASA Canopy
A standing team that runs your cloud platform, keeps it secure and reports back each month.
Media contacts
Our press office answers every request the same working day. For anything urgent outside office hours, call the global number.
Hannah Lindqvist
Head of Communications
press@kiasa.tech+44 20 3870 4410Marcus Bell
Media Relations, North America
press.americas@kiasa.tech+1 416 555 0148Nicole Ong
Media Relations, Asia Pacific
press.apac@kiasa.tech+65 6812 4470
Want to read the report?
Clients and prospective clients of our managed services can request the full audit report under a confidentiality agreement.
