Does this help with GDPR and NIS2 compliance?

It gives you the groundwork. We analyze three critical business processes, map your controls against GDPR and ISO 27001, and hand back a prioritized plan to close the gaps, updated every quarter. Compliance itself depends on your organization applying that plan; the assessment identifies and orders the work, without certifying you.

Are there long-term contracts?

No. Every service is a monthly subscription with no annual lock-in. You can extend or reduce the scope at any time, and cancel by email at least 15 days before the next renewal.

Is this sized for a company like mine?

The standard plans are sized for small and mid-sized companies, typically between 10 and 50 employees. If your scope is larger, the plan is extended with additional assets, users or hours instead of moving you to a different service.

Risk Assessment

Know what's at risk and what an incident would cost you

Security spending is hard to defend without numbers behind it. We analyze three critical business processes, estimate the impact of an incident on each and hand management a prioritized plan.

Order now →

€650+ VAT

Strategic, technical and practical assessment

We analyze the three business processes you cannot afford to lose, estimate what an incident on each would cost in operations, finances, reputation and recovery time, and map your current controls against GDPR and ISO 27001. You receive an executive report for management and a mitigation plan for the IT team, updated every quarter.

More processes in scope? You can extend the plan whenever you want.

How the service works

Impact analysis, control review and risk classification, focused on decisions you can act on.

What's included

✓Three critical business processes analyzed, chosen with you at the start of the engagement
✓Impact analysis covering operations, finances, reputation and recovery time and cost
✓Review of existing policies and controls against GDPR, ISO 27001 and sector standards
✓Risk classification with mitigation measures, and a quarterly update of the plan

Benefits

✓A shared basis for deciding what to protect first, with your IT team involved throughout
✓Groundwork for ISO/IEC 27001 and European regulatory requirements, mapped control by control
✓Investment decisions backed by estimated impact
✓A quarterly review, so the plan follows changes in the business

Service Deliverables

Executive Summary

A document for leadership: the main risks, their estimated impact and the strategic recommendations that follow, without technical jargon.

Technical Analysis Details

For whoever runs security: risk factors, detected weaknesses, the scenarios considered and the control-by-control mapping against GDPR and ISO 27001.

Risk Mitigation Plan

An operational guide for the IT team with priority actions, policy updates and technology recommendations, reviewed each quarter.

Ready to learn the real risks in your infrastructure?