Our services

ISO 27001 and ISMS

An information security management system that fits your organisation and is ready for certification.

• Scope, risk assessment and Statement of Applicability
• Policies, processes and controls that people actually use
• Internal audit, management review and certification readiness

NIS2 readiness

Clarity on what NIS2 means for your organisation and what to do first.

• Determining whether and how NIS2 applies to you
• Gap analysis of governance, controls and incident reporting
• A prioritised action plan for management and delivery teams

Internal audits and gap analysis

An independent view of where you stand, with findings you can act on.

• Internal ISMS audits against ISO 27001
• Gap analyses against standards and regulation
• Concrete improvements, ranked by risk

SecurityAdvice is not a certification body. Our audits support your improvement and do not replace a certification audit.

Fractional CISO and advisory

Experienced information security leadership and advice, without a full-time hire.

• Part-time CISO role, reporting to management and the board
• Advice on GDPR, privileged access management and other topics
• Training and coaching for your own team

Programme management

Security and technology programmes that stay on course, even when they are large and international.

• Programme set-up, governance and reporting
• Steering projects, suppliers and stakeholders
• Guiding large-scale digital transformation