01
ISO 27001 and ISMS
Scope, risks, controls, SoA, evidence and audit preparation for a maintainable system.
CYBERSECURITY AND COMPLIANCE
ISO 27001, ENS and technical security assessment.
ISO 27001 and ENS consulting, gap analysis, vulnerability assessment and pentesting. We define scope, identify gaps and prioritise controls and evidence.
Diagnosisgaps and prioritiesPlanrealistic roadmapEvidenceaudit and monitoringAddressclear decisionsTechniqueverifiable controls
WHAT WE SOLVE
A security route proportionate to your activity and your requirements.
We prioritize requirements, risks, controls and evidence so that management, IT and audit understand what needs to be done and why.
02
ENS and public sector
Adaptation to the National Security Scheme for suppliers, public contracts and regulated systems.
03
Gap analysis
We compare controls and evidence against agreed requirements and document gaps and priorities.
04
Vulnerability assessment and pentesting
Assessment identifies and prioritises vulnerabilities. Pentesting validates exploitation paths through authorised tests with written scope and limits.
DELIVERABLES
What can we work on?
A single roadmap to meet requirements, reduce exposure and generate useful evidence.
- Diagnosis of applicability and gaps.
- Roadmap of controls and those responsible.
- Policies, procedures and evidence.
- Technical validation, pentest or AppSec review.
- Support for audit and continuous improvement.
METHOD
Diagnosis, risks, controls and improvement.
We start with objectives, users and processes. We design a delivered solution, develop in iterations and measure the result to improve after publishing.
- Assessment, risk evaluation, control planning and evidence validation within the agreed scope.
- Assessment, risk evaluation, control planning and evidence validation within the agreed scope.
- Assessment, risk evaluation, control planning and evidence validation within the agreed scope.
- Assessment, risk evaluation, control planning and evidence validation within the agreed scope.
FAQ
Common questions.
Direct answers before starting.
What rule or requirement applies to us?
We review it according to activity, size, contracts, clients and exposure. It is not based on a predetermined certification.
Can ISO 27001, ENS and NIS2 work together?
They share risks, controls, evidence, continuity and suppliers. A coordinated route avoids duplications.
Do you only do consulting or also technical validation?
Both. We can accompany the implementation and validate applications, APIs or infrastructure with tests and technical review.
SAFETY DIAGNOSIS
Tell us what requirement, risk or demand you have.
We propose an initial scope, priorities and next steps without committing to a solution you don't need.
- We will review your enquiry to agree scope and next steps.
- Business and audit oriented.
- No commitment.