Governance & compliance
Cybersecurity Management & Compliance
Structural support for information security and compliance, as an external CISO or within a NIS2 or ISO 27001 programme.
External CISO (vCISO)
As vCISO, we take on a fixed role in your organisation, at a frequency tailored to the business. The role combines policy with a technical approach:
- Strategy and policy: helping shape the security strategy, advising leadership, drafting policy and monitoring compliance.
- Risk and continuity: the risk register, incident procedures, business continuity and disaster recovery plans, and security requirements for suppliers.
- Technical direction: overseeing the security architecture, reviewing new projects, coaching the IT team and checking that measures work in practice.
- Reporting: regular reporting to leadership on open risks, progress and decisions required.
NIS2 and CyFun
We determine whether and how NIS2 applies to your organisation and perform a gap analysis at the appropriate CyFun level. We then support the implementation and prepare you for verification by a conformity assessment body.
ISO 27001
We can be engaged for the implementation of an ISMS or for the internal audit. We do not do both for the same organisation: ISO 27001 requires the internal auditor to be objective and impartial towards what is being audited.