01
ISO 27001 and ISMS
Scope, risks, controls, SoA, evidence and audit preparation for a maintainable system.
CYBERSECURITY AND COMPLIANCE
Protect, comply and demonstrate security without slowing down business.
We accompany companies that need to implement ISO 27001, adapt to the ENS, prepare NIS2 or validate their systems with a technical and business vision.
Diagnosisgaps and prioritiesPlanrealistic roadmapEvidenceaudit and monitoringAddressclear decisionsTechniqueverifiable controls
WHAT WE SOLVE
A security route proportionate to your activity and your requirements.
We prioritize requirements, risks, controls and evidence so that management, IT and audit understand what needs to be done and why.
02
ENS and public sector
Adaptation to the National Security Scheme for suppliers, public contracts and regulated systems.
03
NIS2 and continuity
Government, suppliers, incidents, continuity and priorities according to applicability.
04
Pentesting and AppSec
Test web, APIs, network and application review to find and prioritize real risks.
DELIVERABLES
What can we work on?
A single roadmap to meet requirements, reduce exposure and generate useful evidence.
- Diagnosis of applicability and gaps.
- Roadmap of controls and those responsible.
- Policies, procedures and evidence.
- Technical validation, pentest or AppSec review.
- Support for audit and continuous improvement.
METHOD
Diagnosis, risks, controls and improvement.
We start with objectives, users and processes. We design a delivered solution, develop in iterations and measure the result to improve after publishing.
- Discovery session: objectives, users, content and restrictions.
- Scope proposal, architecture and roadmap by phases.
- UX/UI design and iterative development with reviews.
- Publication, measurement and evolutionary support.
FAQ
Common questions.
Direct answers before starting.
What rule or requirement applies to us?
We review it according to activity, size, contracts, clients and exposure. It is not based on a predetermined certification.
Can ISO 27001, ENS and NIS2 work together?
They share risks, controls, evidence, continuity and suppliers. A coordinated route avoids duplications.
Do you only do consulting or also technical validation?
Both. We can accompany the implementation and validate applications, APIs or infrastructure with tests and technical review.
SAFETY DIAGNOSIS
Tell us what requirement, risk or demand you have.
We propose an initial scope, priorities and next steps without committing to a solution you don't need.
- Response within 24/48 business hours.
- Business and audit oriented.
- No commitment.