Services

We combine regulatory expertise with hands-on engineering. Focus: actionable measures, clear documentation and sustainable security.

NIS2 readiness & implementation

Gap analysis, remediation roadmap, policies/processes, technical controls and audit preparation — practical and engineering-driven.

  • Gap analysis & roadmap
  • Policies & processes
  • Control implementation
  • Audit readiness

GDPR / privacy

Privacy-compliant processes, technical & organizational measures, risk assessments and hands-on documentation support.

  • TOMs & processes
  • Risk assessment
  • DPIA support
  • Templates & documentation

DORA & operational resilience

ICT risk management, controls, incident handling, business continuity and third-party risk aligned with DORA requirements.

  • ICT risks & controls
  • Incident response
  • BCM/DR
  • Third-party risk

ISO 27001 / 27002

Build or mature an ISMS, Statement of Applicability (SoA), internal audits, measures tracking and continuous improvement.

  • ISMS build/maturity
  • SoA & controls
  • Internal audits
  • Continuous improvement

Security checks & assessments

Technical and organizational assessments — from quick checks to structured maturity reviews.

  • Maturity & risk
  • Hardening checks
  • Security baselines
  • Report & remediation plan

Secure software engineering

Secure-by-design, code reviews, threat modeling and secure implementation for resilient applications.

  • Threat modeling
  • Secure code reviews
  • OWASP & Secure SDLC
  • Security-by-design

Next step

If you like, we’ll schedule a short intro call and define scope, priorities and a roadmap.