Salmaan Khan

Salmaan is an independent GRC consultant specialising in information security, quality and compliance. He advises boards, senior leaders and security professionals on which risks require attention and what controls are proportionate to manage them effectively.

He considers legal and regulatory requirements alongside the risks that are relevant to the organisation. He also takes a critical view of where existing processes are ineffective, insufficiently justified or unnecessarily complex. His advice helps organisations set priorities, establish appropriate controls and assign clear accountability.

Clients engage Salmaan to provide an independent view of their existing control environment, advise on improvements and support their implementation. He links policy with day-to-day operations, helping ensure that controls are both proportionate and effective in practice.