← services
[GRC]
Cybersecurity Consulting
We help organisations turn regulation and standards into something that works day to day: a clear picture of risk, proportionate controls, documentation people actually use and audits that hold up.
What is included
ISO/IEC 27001
Gap analysis, risk assessment, Statement of Applicability, policies and procedures, internal audit and certification support.
NIS2 and national cybersecurity law
Scoping, risk management measures, incident reporting processes and management accountability.
Sector frameworks
DORA for financial entities, TISAX for the automotive supply chain and IEC 62443 for industrial control systems.
Virtual CISO
Ongoing security leadership: roadmap, reporting to management, supplier security and incident readiness.
What you receive
- ›Gap analysis with a prioritised roadmap
- ›Risk register and treatment plan
- ›Policy and procedure set tailored to your organisation
- ›Internal audit reports and audit-day support
A good fit for
- ›Companies starting with ISO/IEC 27001 or NIS2
- ›Organisations with an audit or customer assessment coming up
- ›Teams without a full-time security lead
Discuss cybersecurity consulting with us
We will come back with a proposed scope, timeline and price.