01
Privacy & Data Protection
End-to-end NDPA compliance: DCPMI registration, RoPA, DPIA, DPO enablement, and annual CAR filing — as a licensed NDPC DPCO.
Explore
Integrated Professional Services — Nigeria
Digital Trust.
Privacy.
Assurance & Financial Intelligence.
We enable institutions to meet regulatory expectations, withstand scrutiny, and operate with confidence through audit-defensible, regulator-aligned, and board-visible delivery.
NDPC DPCO
NDPC/IIM ATO
ISACA DTEF
FCA
CISA
CDPSE
Regulatory Status
NDPA Aligned
Active · NDPC/DCP/01784
Digital Trust
DTEF Certified
ISACA International
Governance Layer
Board Visibility
Audit · Assurance · Reporting
Assurance
Defensible
FCA · CISA · CDPSE
Privacy
Inspection-Ready
NDPC · IIM ATO
DCPMI Active
CAR Filing Due
The Regulatory Landscape
Compliance Has Changed.
Regulators no longer ask only whether organisations have policies. They expect evidence of operational capability: DPIA, RoPA, breach response, audit trail, governance reporting, and accountability.
NDPA 2023
Evidence of Compliance
The NDPC now inspects for documented processing records, filed DPIAs, and operational DPO functions — not just policy documents.
Board Accountability
Governance Responsibility
Boards carry personal accountability for NDPA compliance and digital trust governance under Nigerian regulatory frameworks.
ISACA DTEF
Measurable Digital Trust
Digital trust must be assessed, structured, and board-reported across seven governance domains — not merely asserted.
CAR Filing
Annual Audit Returns
Compliance Audit Returns must be filed with the NDPC annually by licensed DPCOs on behalf of data controllers and processors.
The gap between appearing compliant and being defensibly compliant is where NDPC enforcement happens. Controls designed for internal review fail under regulatory inspection, litigation scrutiny, and board accountability challenge.
Integrated Advisory
Integrated Advisory for Trust, Compliance, Assurance and Institutional Confidence.
SAC operates at the convergence of five disciplines — not as a collection of separate services, but as a coordinated model where each discipline reinforces the others. The integration is structural, not aspirational.
02
Digital Trust & Cybersecurity
ISACA DTEF maturity assessments, board digital trust governance, and cybersecurity resilience frameworks across all seven DTEF domains.
Explore03
Independent Assurance
Credible, objective assurance over governance, privacy, cybersecurity, risk, and financial controls — structured for external scrutiny, not internal comfort.
Explore04
Financial Advisory
FCA-credentialled principals delivering accounting, capital structuring, transaction advisory, and financial governance to investor, lender, and regulator standards.
ExploreIntegration is not a claim. It is the structure.
View all servicesCore Services
What SAC Delivers.
Six service areas — each with a specific problem it resolves, a specific credential that authorises the delivery, and a specific link to go deeper.
NDPC-Licensed DPCO · NDPC/DCP/01784
Privacy & Data Protection Compliance
Problem: Organisations face NDPC enforcement risk with no documented processing records or operational DPO function.
SAC designs and implements end-to-end NDPA compliance programmes — including RoPA, DPIA execution, DPO enablement, and annual CAR filing as a licensed DPCO.
Explore serviceNDPC Licensed · Annual Filing
NDPC Compliance Audit Returns
Problem: CAR filing is mandatory annually for DCPMI-classified organisations — most have not filed.
As a licensed DPCO, SAC prepares, certifies, and files Compliance Audit Returns with the NDPC on behalf of data controllers and processors.
Explore serviceNDPA Section 30 · GAID Compliant
DCPMI Registration Advisory
Problem: Data Controllers and Processors of Major Importance are required to register with the NDPC — most have not confirmed their threshold status.
SAC assesses DCPMI classification thresholds, prepares and submits NDPC registration applications, and manages the annual renewal cycle.
Explore serviceISACA DTEF Certified Facilitator
Digital Trust & Cybersecurity
Problem: Boards acknowledge digital trust accountability under NDPA and CBN guidelines but have no governance framework to discharge it.
SAC conducts DTEF maturity assessments across all seven trust domains and builds the board governance structures, KPIs, and reporting dashboards required.
Explore serviceCISA · CRISC · CDPSE
Independent Assurance
Problem: Internal assurance functions lack the independence, objectivity, or multi-discipline scope that regulators and boards require.
SAC provides independent assurance over governance, privacy, cybersecurity, risk, and financial controls — co-sourced internal audit, forensic investigations, and governance reviews.
Explore serviceDual FCA Principals · FRCN Registered
Financial Advisory
Problem: Financial governance decisions require FCA-credentialled oversight to satisfy investor, lender, and regulatory scrutiny.
SAC delivers capital structuring, transaction due diligence, accounting systems advisory, and financial governance frameworks led by dual FCA-credentialled principals.
Explore serviceSolutions by Outcome
Commission an Outcome, Not a Process.
Every SAC solution is defined by what it produces — not what activities it performs. Scoped deliverables. Named timelines. Audit-defensible outputs.
01
Achieve NDPA/GAID Compliance
Full NDPA compliance lifecycle — DCPMI registration, RoPA, DPIA, DPO designation, annual CAR filing — delivered in 60 days by a licensed DPCO.
Commission this02
Prepare for NDPC Audit & CAR Filing
Audit readiness assessment, evidence pack preparation, and Compliance Audit Return filing with the NDPC — submitted in SAC's name as a licensed DPCO.
Commission this03
Build Board-Level Privacy Governance
Board accountability frameworks, privacy governance policies, DPO reporting structures, and DTEF-aligned digital trust KPIs for Audit Committee reporting.
Commission this04
Respond to Data Breaches
72-hour NDPC breach notification, evidence preservation, regulatory liaison, and post-breach remediation — led by a licensed DPCO with 24-hour response SLA.
Commission this05
Manage Third-Party Data Risk
Data processor due diligence, contract review, data sharing agreements, and third-party transfer risk assessments structured to NDPA transfer restriction requirements.
Commission this+
View All Solutions
Ten packaged solutions across privacy, digital trust, cybersecurity, assurance, and financial advisory — each with fixed scope, defined deliverables, and named timelines.
See all solutionsIndustries Served
Sector-Native. Not Generic Framework Application.
SAC applies the specific regulatory obligations of each sector — NDPA, CBN, NHIS, NCC, NUPRC, BPP — not a standard framework adapted for every context.
Public Sector & Government
NDPA · BPP · SCUML
Financial Services & Fintech
NDPA · CBN · NAICOM
Oil, Gas & Critical Infrastructure
NDPA · NUPRC · DPR
Technology & Digital Platforms
NDPA · NCC · CBN
NGOs & Development Sector
NDPA · SCUML · Donor Standards
Real Estate & Infrastructure
NDPA · FRCN · BPP
Institutional Credentials
Recognised. Certified. Trusted.
Every credential is verifiable with its issuing body. SAC publishes reference numbers because claims without verifiable anchors are not evidence — and evidence is what this firm is built to produce.
NDPC · Nigeria
Licensed Data Protection Compliance Organisation
NDPC/DCP/01784
Authorises delivery of data protection advisory, audit, and Compliance Audit Return filing under Section 33 of the NDPA 2023.
IIM Africa · NDPC
NDPC / IIM Accredited Training Organisation
#d193ed82f32a4eb64
Accredited to deliver and certify the IIM Certified Data Protection Officer (CDPO) programme. Graduates verifiable with IIM Africa.
ISACA · International
ISACA Digital Trust Ecosystem Framework (DTEF) Certified Facilitator
ISACA Certified
Nigeria's only DTEF Certified Facilitator — authorised to assess digital trust maturity across all seven DTEF domains.
ICAN · Nigeria
FCA — Fellow of the Institute of Chartered Accountants of Nigeria
ICAN · FRCN Registered
Financial advisory practice led by FCA principals registered with the Financial Reporting Council of Nigeria.
ISACA · International
CISA — Certified Information Systems Auditor
ISACA Certified
Principal-level CISA credential — verifiable with ISACA International. Authorises IS audit, assurance, and governance engagements.
ISACA · International
CDPSE — Certified Data Privacy Solutions Engineer
ISACA Certified
Privacy solutions engineering credential — verifiable with ISACA International. Applied to NDPA technical compliance architecture.
Free Resource
Assess Your Compliance Readiness.
Download the NDPA/GAID Compliance Readiness Checklist — a structured, NDPC-aligned framework covering all principal compliance obligations for data controllers and processors in Nigeria.
Free Download · PDF
NDPA/GAID Compliance Readiness Checklist
All principal NDPA and GAID obligations mapped against the NDPC's audit framework — DCPMI registration, RoPA, DPIA, DPO designation, breach response, CAR filing, and board governance. Formatted for DPO functions and compliance teams.
Get your free checklist.
Book a Consultation
Move from Documentation
to Demonstrable Compliance.
A 20-minute conversation with a named SAC principal — not a sales call, not a discovery questionnaire — substantive diagnostic expertise on your compliance position and what it requires.
20 minutes · No screening
Named SAC principal
No obligation · Genuine diagnostic