What Zygma does

Zygma Inc. is a privately held, independent consultancy founded in 1993 and headquartered in California, currently in its 33rd year of operations. The firm specializes in information security and identity management consulting and audit services, with a practice built around the ISO/IEC 27000 family of standards (particularly ISO/IEC 27001 and 27002), ISO/IEC 20000-1 for IT service management, and trust/assurance frameworks aligned to ISO/IEC 17021 and 17065. The company also supports the Kantara Initiative's Identity Assurance Framework at Assurance Levels 1, 2, and 3, an offering that leverages the CEO's role as principal architect of the IAF. The company has delivered services across more than 20 countries to governments, commercial organisations, standards bodies, and technical and forensic IT specialists.

The firm operates without a proprietary software product or technology platform; its "technology" is professional expertise in standards interpretation, ISMS implementation, and independent auditing. Service lines include ISMS consulting, ITSMS consulting, trust/assurance framework design, standardization support, independent auditor/expert reviewer engagements, and Kakarta IAF support. Delivery is executed through an international network of partners and associates rather than a large internal team, consistent with the company's stated headcount of 11-50 employees and its description as a "very small independent consultancy."

Zygma's business model is fee-for-service professional consulting, with no disclosed pricing, no product licensing, and no subscription revenue. Go-to-market is sales-led and direct, with engagement-based relationships rather than marketing campaigns; the company relies on thought leadership through its website (zygma.biz), four published white papers on ISMS conformity, HIPAA, FISMA, and industry commentary, and on the professional credibility of CEO Richard G. Wilsher within the Kantara Initiative and INCITS/CS1 (the U.S. national body participating in ISO JTC 1/SC 27). The firm has no external funding, no parent company, and no subsidiaries.

Name

Zygma

Legal name

Zygma Inc.

Website

https://zygma.biz

Company type

Private

Founded year

1993

Operating status

Operating

Headcount range

11–50 employees

Short description

Zygma Inc. is a 33-year-old independent consultancy offering information security management systems, IT service management, and digital identity assurance consulting and audit services across 20+ countries to governments, commercial organizations, and standards bodies.

Ownership category

akta.pro rank

Headquarters

HQ city

California

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales

Revenue model

1. Professional Consulting Services: Fee-for-service consulting engagements providing information security and identity management advisory services, ISMS implementation support, audit services, and standards development assistance. Revenue is generated through professional services engagements rather than product sales.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

Zygma is an independent consultancy providing information security and identity management consulting and audit services. The firm specializes in ISMS consulting built around ISO/IEC 27001 and 27002, ITSMS consulting per ISO/IEC 20000-1, trust/assurance framework design aligned to ISO/IEC 17021 and 17065, independent auditing against ISO/IEC 20000-1 and 27001, standards development support, and Kantara Initiative Identity Assurance Framework services at Assurance Levels 1, 2, and 3. Services are delivered as bespoke professional engagements across more than twenty countries.

Product overview

Zygma is an independent consultancy firm in its 33rd year of operations, offering information security and identity management consulting and audit services. Rather than a software product company, Zygma provides professional services including: Information Security Management Systems (ISMS) consulting built around ISO/IEC 27001/27002, IT Service Management Systems (ITSMS) consulting per ISO/IEC 20000-1, Trust/Assurance Frameworks setup, Standards development support, Independent auditing and expert review services, and Kantara Initiative support services at Assurance Levels 1-3. These services are delivered across over 20 countries to governments, commercial organizations, standards bodies, and technical specialists.

Differentiator

Problem solved

Functional benefit

Products and services

• Information Security Management Systems (ISMS) Consulting Consulting services for building, operating, and auditing Information Security Management Systems following ISO/IEC 27001 and ISO/IEC 27002, including training and implementation guidance. Targeted at organizations pursuing ISMS certification and conformance.
• IT Service Management Systems (ITSMS) Consulting Consulting services for implementing IT Service Management Systems built around ISO/IEC 20000-1 requirements, supported by ISO/IEC 20000-2 guidance. For organizations seeking ITSMS conformity and certification.
• Trust/Assurance Frameworks Services Setup and design of organizational frameworks within which electronic services operate under defined regulations and operational criteria, including alignment to International Standards such as ISO/IEC 17021 and 17065. For governments, certification bodies, and assurance scheme operators.
• Standardization Services Standards development assistance for standards bodies and other agencies and organizations wanting to develop standards documents. For standards bodies and technical committees.
• Independent Auditor / Expert Reviewer Services Independent auditing and expert review services applying formal auditing techniques against specific standards, particularly ISO/IEC 20000-1 and 27001, and identity and credential management systems (ICAMs). For organizations seeking independent assurance.
• General Information Security Consultancy General consultancy services for information security needs not readily categorized in specific areas, addressing management, policy, procedural, and technical information security topics. For clients with bespoke information security requirements.
• Kantara Support Services Specialized support for Kantara Initiative Identity Assurance Framework implementation, offered at Assurance Levels 1, 2, and 3, leveraging unique understanding of the IAF from its principal architect. For organizations seeking Kantara IAF accreditation and identity assurance services.

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• Kantara InitiativecoreStrategic or Co-development PartnerZygma maintains a core strategic relationship with Kantara Initiative, where CEO Richard Wilsher served as principal architect of the Identity Assurance Framework (IAF). The company is a Kantara Certified Assessor offering services at Assurance Levels 1, 2, and 3. This relationship provides significant credibility and domain expertise in digital identity frameworks.

Scale indicators2 records

Recent moves4 records

Expansion highlights2 records

Emerging players

• Drata: Compliance automation platform delivering evidence-gathering and monitoring for ISO 27001, SOC 2, HITRUST, and other frameworks. Emerging player adjacent to Zygma's manual advisory model, accelerating certification cycles and potentially compressing traditional consulting budgets.
• Vanta: Automated compliance management platform that supports ISO 27001, SOC 2, HIPAA, and similar frameworks with continuous monitoring and evidence collection. Emerging player reshaping the ISMS compliance workflow that Zygma's consulting supports.

Direct peers

• A-LIGN: Cybersecurity compliance and audit firm specializing in ISO 27001, SOC, HITRUST, PCI, and FedRAMP assessments. Directly comparable to Zygma in ISMS certification support though operating at significantly larger scale.
• Coalfire: Leading US cybersecurity advisory and assessment firm with deep ISO 27001, HITRUST, FedRAMP, and CMMC practices. Direct peer competing for the same enterprise ISMS advisory and certification engagements as Zygma.
• Bridewell Consulting: UK-headquartered cybersecurity consultancy delivering ISO 27001, NIST, and Cyber Essentials advisory, penetration testing, and managed security services. Direct peer offering information security management consulting comparable to Zygma's offerings.
• Schellman: US-based top-tier cybersecurity and compliance assessment firm providing ISO 27001, SOC, HITRUST, FedRAMP, and PCI services. Directly comparable to Zygma in ISMS certification advisory, though at materially larger scale.
• IT Governance: UK-based specialist consultancy focused on ISO 27001 ISMS implementation, cybersecurity standards, and PCI DSS advisory. Closely comparable to Zygma's boutique ISMS consulting model in a different geography.

Broad incumbents

• KPMG: Big 4 professional services firm with a global cybersecurity practice spanning ISO 27001 advisory, ISMS implementation, identity assurance, and risk transformation. Broad incumbent competing with Zygma on enterprise ISMS mandates as one of many practice areas.
• Deloitte: Big 4 firm with an extensive cybersecurity and risk advisory offering including ISO 27001 advisory, ISMS assurance, and identity frameworks. Broad incumbent addressing ISMS needs as part of a wider portfolio rather than as a niche specialist.
• EY: Big 4 firm with a sizable cybersecurity and privacy practice covering ISO 27001, SOC 2, and identity assurance work. Broad incumbent that competes for enterprise ISMS engagements without specializing in Zygma's niche.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

Compliance17 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Zygma