Turn EU cyber rules into a plan you can sign.
Senior cybersecurity advice for EU organisations. We get you ready for NIS2, write IT Security Plans ready for approval, and lead security without a full-time CISO. At a fixed price agreed before we start.
Free 30-minute call. No obligation.
Experience from
- Cisco
- Capgemini
- Deloitte
- European Commission
- Ordina
- EU Personnel Security Clearance
- CISM, CRISC and CCSP certified
- Contributor to the Geneva Dialogue
Start with the problem you have today.
Pick the line that sounds like you.
-
NIS2 compliance
Your NIS2 deadline is coming and you don’t know your CyFun® level yet. We get you a scored self-assessment and an audit-ready file.
NIS2 packages -
IT Security Plan for EU institutions
Protecting your organisation starts with knowing your risks. We run a full risk assessment of your information system and turn it into a plan your management can approve and fund. Your ITSP is ready in 2–4 weeks.
About the ITSP -
CISO advisory
You need a senior security lead, but not full-time. We own your roadmap, board reporting and audits.
CISO advisory -
Risk management & GRC
You need a clear view of your cyber risk. We assess it to ISO 27005 and give you a plan your board can act on.
Risk management -
Security awareness
Your people are the target. We train them to spot and report attacks, and measure what changed.
Security awareness
A fixed price within 2 business days of your call.
Free 30-minute call
Tell us what you need. We tell you plainly what we think, with no sales script.
Written fixed-price offer
Scope, price, dates and deliverables, within 2 business days. The price does not move once you sign.
Senior delivery
One senior consultant does the work. You review each step, so there are no surprises at the end.
What you can count on.
Senior people only
The person you meet is the person who does the work. No junior rotation.
Prices you can see
Our main prices are published. You know the cost before we start.
Your data stays local
We never put your data through cloud or third-party AI tools.
Independent advice
No vendor deals and no commission on tools. A recommendation is never a sale.
Recent insights
-
Managing risk on systems that use AI: what changes, what doesn’t
The EU AI Act’s high-risk deadlines moved to December 2027 and later. The risks did not. How to assess AI-enabled systems with the risk method you already use.
-
Risk assessment with ITSRM, and why a good ITSP raises your cyber maturity
What the European Commission’s ITSRM method asks of you, its seven phases, the mistakes that fail audits, and how a real plan raises maturity.
-
The NIS2 Directive: a technical overview
Scope across 18 sectors, the ten Article 21 security areas, the 24-hour and 72-hour reporting steps, supply chain duties, penalties and the Belgian deadlines.
Not sure where to start?
Book a free 30-minute call. We’ll tell you what you need, and what you don’t.