Nairobi, Kenya · Management Consulting Across East Africa
The most demanding institutions across East Africa don't need another certificate gathering dust. They need systems that survive scrutiny, outlast projects and drive real operational change. ISO certification, strategic planning and capacity building. Nairobi-based since 2015.
ISO certification and management systems built to last.
85+ organisations across East Africa. Since 2015.
We build organisations that actually work.
Not just ones that pass audits.
Maier Consulting was founded in Nairobi in 2015 with a straightforward conviction: the gap between a well-run organisation and a poorly-run one is almost never resources – it is systems, skills and the people who own them. A decade later, that conviction drives everything we do.
We work across the full range of what makes an institution function. That means ISO management systems – quality, information security, environmental, occupational health, business continuity – but it equally means strategic planning when leadership needs a direction, procurement systems when compliance is non-negotiable, customised training when your team needs to own what we build, and institutional surveys when you need to understand what is actually happening before you act.
Our clients include public universities, national water utilities, ICT companies, TVET institutions, development partners and World Bank-financed programmes. They share a common profile: they operate in environments where getting it wrong is not an option, and they need partners who understand the Kenyan and East African context – not just the standards. We understand the Public Procurement and Asset Disposal Act as well as we understand ISO 27001. We understand performance contracting as well as we understand ISO 9001. That combination is what makes the work land.
We do not hand over a folder and leave. Every engagement ends with your team knowing more than when we arrived – internal auditors trained, documentation owned, processes understood. That is our real deliverable.
Two partners. A combined 24 years at Maier Consulting. A shared conviction: the work is only finished when the system keeps running without us.
Betty has spent over twelve years inside the systems that make organisations work – from the first gap analysis through to the moment a certificate lands and the real work begins. Her BSc in Computer Science and dual IRCA certification in ISO 9001:2015 and ISO 27001 give her the technical foundation; the 30-plus institutions she has led through certification give her something harder to acquire – the practical judgment to know what will work in a specific environment and what will not. She is Maier Consulting's lead on systems documentation and information security – the person clients call when the deadline is fixed and the margin for error is zero.
Justice sets the standard for how Maier Consulting works. His twelve years in the field span every institutional type – national universities, government ministries, regulatory bodies, infrastructure authorities, TVET colleges – and every phase of a management systems engagement, from the first board briefing to post-certification surveillance. An IRCA-certified Lead Auditor in ISO 9001:2015 and ISO 27001, BSI-trained trainer, and Strathmore-certified in data protection, he brings both the technical depth and the client relationship skills to make complex, multi-stakeholder engagements deliver. His benchmark is simple: systems that still function and still improve long after the engagement closes.
From gap analysis to post-certification surveillance – strategy, training, surveys, audits – we cover every dimension of how an institution performs.
Every engagement follows the same four-stage discipline. No shortcuts. No frameworks applied without reading your specific context first.
We begin where you actually are, not where you think you are. Gap analysis against the relevant standard, stakeholder interviews, and a documentation review that surfaces genuine risks – not just the obvious ones. Every decision that follows is built on this foundation.
Management systems built around your operating reality. Policies, procedures and frameworks your team will actually use – not documentation that satisfies an auditor and then sits unread. Every document is drafted with the person who has to follow it in mind.
We train your people, not just your documentation. Internal auditors who understand why a requirement exists, not just what it says. Management review chairs who can run a session that adds value. System owners who can answer a certification auditor without reaching for the consultant's number.
Pre-certification audit support, real-time corrective action during the certification process, and post-certification surveillance. We stay until the system is genuinely embedded. Our benchmark: the first surveillance audit without us in the room – that is when we know the work is done.
Every engagement on time, in full, with zero major non-conformities at first attempt. Here is what that looks like across sectors.
Socio-Emotional Skills Development for 900+ youth across Nyandarua County.
Competitively awarded Lot 4 under the NYOTA Framework Agreement. Full World Bank safeguarding compliance including SEA/SH standards. Customised SESD programme across 35+ decentralised venues.
Market linkage development for Nature-Based Enterprises in Mt. Elgon and Cherengany Hills.
30-day Lot 3 assignment. Community marketing teams built, training manual developed and accepted by KEFRI, MOAs signed between enterprises and market actors. Youth, women and persons with disabilities centred throughout.
Full ISO 27001:2022 ISMS certified in 8 weeks. Zero major non-conformities at first attempt.
Engaged September 2025 with a fixed deadline: certified by 30 November 2025. Gap analysis, risk assessment, SoA, policy architecture, staff awareness, internal auditor training, pre-certification support. Surveillance retained post-certification.
ISO 9001:2015 and ISO 27001 delivered as a single Integrated Management System.
Gap analyses under both standards, integrated documentation eliminating duplication, internal auditor training covering both simultaneously. University ranked top performer in government performance contracting for consecutive cycles.
PPADA 2015-compliant Procurement and Stores Manual across 7 regions and 28 zones.
Stakeholder workshops, staff interviews, full legislative review of PPADA 2015. Manual covers supplier management, contract oversight, asset disposal, stores management and standard forms, all aligned to ISO 9001 requirements.
52 top management and staff certified as ISO 9001:2015 Internal Auditors.
Two-day intensive at Tom Mboya Labour College, Kisumu. ISO 19011:2018 auditing principles, clause-by-clause walkthrough, checklist development, peer review and simulated audit scenarios. Subsequent surveillance audit: zero major findings.
85+ organisations. Zero major non-conformities at first-attempt audits. These are the voices behind those numbers.
In three years of working with Maier Consulting, our institution moved from a quality management system that existed mainly on paper to one that genuinely drives how we operate. Our last surveillance audit passed with commendation. Our staff now see the system as something that helps them do their jobs, not something imposed from outside.
The ISO 27001 implementation was delivered with a speed and depth we did not think was possible for our timeline. The team did not just guide us to certification; they built a genuine information security culture. Our staff identify and respond to risks in their daily work. Zero major non-conformities at first attempt.
What distinguishes Maier from other consultancies is that they understand our institutional reality. They know the procurement environment, the governance structures, the pressures on public organisations. Their Procurement Manual has become our operational reference. Every tender we run is consistent with PPADA and ISO requirements.
We needed a training partner who could work in the field, across multiple counties, with young people who had never engaged with a formal programme before. Maier designed a curriculum that was genuinely fit for purpose: culturally sensitive, practically grounded and delivered with consistency across all venues. The World Bank compliance requirements were met without any friction.
Implementing dual certification – ISO 9001 and ISO 27001 together – sounded complex. Maier made it achievable by designing one integrated framework from day one. We avoided the duplication and audit fatigue that comes from running two separate systems. Our management review now covers both standards in a single session. The efficiency gain has been substantial.
+ 70 more organisations across Kenya, Uganda, Tanzania, Rwanda and beyond
When a Nairobi ICT firm needed ISO 27001:2022 certification in eight weeks, most consultancies said no. We said yes – and here is exactly how we did it: the methodology, the discipline, and the culture shifts that made it work.
Most universities implement ISO 9001 and ISO 27001 as two separate systems and suffer twice the audit burden. The University of Embu did it differently – one integrated framework, one internal audit cycle, and a top government performance ranking.
Public institutions face a dual compliance burden: PPADA 2015 on one side, ISO 9001 on the other. From our work with Nairobi City Water, here are the common pitfalls, the non-negotiables, and the design principles that make both auditors go home happy.
Not sure where to start? We offer a complimentary readiness check so you know exactly where you stand before committing to anything.
