# JBW Group International, LLC - **Type:** Advisory firm - **Website:** https://www.jbwgroup.com - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A US advisory firm in Minnesota offering an outsourced chief privacy officer, ISO 27001 readiness work and AI-governance advice mapped to ISO 42001. ## JBW Group International scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 The compliance-as-a-service page cites incident response support and regulatory notification guidance as a deliverable, but no named enforcement-defense case or regulator interaction is documented anywhere publicly. ### Qualifications of the people who do the work: 4/5 CEO Brock Griffin and named principal consultants hold CISSP, CISA, CDPSE and ISO 27001/42001 Lead Auditor credentials, and the firm carries BBB accreditation with an A+ rating. ### What it publishes about fees: 2/5 Engagement tiers are described only by monthly hour ranges on the CaaS page; no dollar rates, retainer fees or pricing examples appear anywhere on the site. ### Knowledge of your sector: 3/5 The firm names healthcare, financial-services and critical-information clients and shows one named healthcare case study, but most marketing reads as generic multi-sector rather than deeply vertical-specialised. ### Independence from what it sells: 4/5 No proprietary GRC platform, compliance software or licensed tool was found being sold alongside advisory work; engagements are billed as advisory hours or monthly retainers only. ### Who carries the risk if the advice is wrong: 2/5 No professional-liability or errors-and-omissions insurance is disclosed publicly; the only standing-behind-the-work claim found is a marketed 100% first-time ISO audit pass rate. ## Sources for JBW Group International Every line carries the page it was read on and the date it was checked. - JBW Group International, LLC is registered as a domestic Limited Liability Company in Minnesota - Source: https://opencorporates.com/companies/us_mn/5975b4c4-c279-ee11-9078-00155d01c440 - Checked: 2026-09-20 - The firm's own published headquarters address matches its state-register address - Source: https://www.jbwgroup.com/about.html - Checked: 2026-09-20 - BBB lists the business start date, accreditation status and complaint history - Source: https://www.bbb.org/us/mn/plymouth/profile/business-consultant/jbw-group-international-llc-0704-96130724 - Checked: 2026-09-20 - CEO/President Brock Griffin holds named privacy/security credentials - Source: https://www.jbwgroup.com/about.html - Checked: 2026-09-20 - Named healthcare-sector case study: Antares Management Solutions (a Medical Mutual of Ohio subsidiary) achieved ISO 27001 certification with JBW Group directing the ISMS build - Source: https://www.jbwgroup.com/assets/pdfs/pr-jbw-group-guides-antares-to-certification-12-10-09f.pdf - Checked: 2026-09-20 - The firm runs a dedicated AI-governance advisory line mapped to ISO 42001 and NIST AI RMF - Source: https://www.jbwgroup.com/ai-governance.html - Checked: 2026-09-20 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Not published - Client results: Published - How it uses AI: Not published ## Strengths - Named, credentialed leadership (CISSP, CISA, CDPSE, ISO 27001/42001 Lead Auditor) staffs the privacy/vCPO and AI-governance practice, not anonymous consultants. - Verifiable named client outcome: Antares Management Solutions (Medical Mutual of Ohio subsidiary) reached ISO 27001 certification under the firm's direction. - Dedicated AI-governance service line mapped explicitly to ISO 42001 and NIST AI RMF, ahead of many outsourced-DPO peers who bolt AI on informally. - BBB-accredited, A+ rating, zero closed complaints in three years. - No evidence found of a bundled proprietary GRC/compliance software product, engagements read as pure advisory hours/retainer, not a software funnel. ## Things to check Each one carries the factual basis it rests on. - The firm markets AI-governance advisory (ISO 42001, NIST AI RMF) yet its own privacy policy discloses nothing about its internal AI tool use or where client data goes when AI is used. - Basis: Reviewed https://jbwgroup.com/privacy-policy and https://www.jbwgroup.com/ai-governance.html on 2026-09-20; neither page contains any AI-use or data-handling disclosure for the firm's own operations. - No fee rates, retainer prices or pricing examples are published anywhere on the site; only hour-band tiers are given. - Basis: https://www.jbwgroup.com/compliance-as-a-service.html lists Foundation (10-15 hrs/mo), Growth (20-30 hrs/mo) and Enterprise (35+ hrs/mo) tiers with no dollar figures attached. - The registered LLC has only a short independently-verifiable track record under its current BBB-listed start date, despite marketing claims of deep individual consultant experience. - Basis: BBB profile lists the business start date as 31 January 2022, per https://www.bbb.org/us/mn/plymouth/profile/business-consultant/jbw-group-international-llc-0704-96130724. ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.