Information security · Privacy · AI governance
Competitive advantage through digital trust
Senior information security, privacy and AI-governance specialists for life sciences and other regulated sectors. Embedded quickly, for as long as you need us.
Clients we've worked with
Trust is now part of what you sell
Patients, customers, partners and regulators increasingly want proof that you secure their data, respect their privacy and use AI responsibly. That proof is tested in vendor assessments, partner due diligence and regulatory reviews, often before a deal or approval can move forward.
We help you build that digital trust into how your organisation works, so it speeds up growth instead of slowing it down.
Services
How we can help
Information Security Advisory
Security strategy and governance, risk and maturity assessments, third-party and cloud security, and CISO support.
Learn more →ISO 27001 Certification Services
From gap analysis to audit for ISO 27001 and its cloud and privacy extensions: ISO 27017, 27018 and 27701.
Learn more →Data Protection Advisory
nDSG and GDPR programmes, patient and clinical research data, DPIAs and cross-border transfers, run with your legal and business teams.
Learn more →AI Governance Advisory
Start with an AI Use & Risk Check: a fixed-scope review of the AI tools in use, which rules apply (nDSG, EU AI Act), and the risks to fix first.
Learn more →Flexible Specialists
Senior consultants embedded in your team, or a fractional CISO or DPO. Any duration, at short notice, with no minimum commitment.
Learn more →
How we work
A senior boutique, built around your timeline
Senior people only
You work directly with experienced specialists, not juniors learning on your project. For larger programmes, we bring in specialists we know and trust.
Flexible by design
Weeks or years. Extend or scale down at short notice, without minimum terms, as your budget and priorities change.
Embedded, with continuity
We learn your processes and key relationships, and stay. Knowledge builds up in your organisation instead of leaving with each new vendor.
Sectors
Where regulation and sensitive data meet
Financial services & insurance
FINMA expectations on AI and operational risk, DORA for ICT providers, privacy and vendor risk.
Critical infrastructure
Security governance and incident reporting duties for operators under Swiss and EU rules.
MOD1's guidance and participation throughout the audit helped assure the assessors that we are taking the appropriate measures to protect sensitive personal data and business information assets. We highly recommend MOD1 as a trusted partner.
Founder
Dylan Johnston
Founder and CEO, MOD1 AG
Dylan has more than 20 years of experience designing and running security and privacy programmes in highly regulated sectors: pharmaceuticals, digital health, banking and telecommunications. He has worked with organisations including Hoffmann-La Roche, Ascensia Diabetes Care, the Bank for International Settlements, the United Nations, AT&T and Swisscom.
His focus is building security and privacy into how an organisation works, and into how it shares sensitive data with patients, customers, researchers, partners and regulators.
Contact
Book a 30-minute intro call
Tell us what you're working on. We'll come back within one working day with a time and, where it helps, a first view of scope.
MOD1 AG
Aeschenplatz 6, 4052 Basel
+41 61 721 11 27
info@mod1consulting.com