Cybersecurity & Compliance
IT security and compliance: NIS2, GDPR, ISO 27001
Security built into every solution — and written proof that it is there, when a regulation or a client asks for it.
Protection for identities, devices and data, plus the measures and documentation required by NIS2, GDPR and ISO 27001.
Most incidents don't start with a sophisticated attack, but with a compromised password or an unpatched device. Security starts with the basics, applied consistently — not with a product bought separately.
These are also the measures that regulations require. The NIS2 Directive requires risk management, incident reporting and supply-chain security. GDPR requires appropriate technical measures. ISO/IEC 27001 requires a documented system. They all have one thing in common: doing things properly is not enough — you have to be able to prove that you do.
To be clear from the outset: we do not provide legal advice and we are not a certification body. Whether and how these rules apply to your company is determined with your legal adviser, and certification is granted by an accredited body. We take care of the technical side and the evidence for it.
What you get
- Your company's accounts can no longer be compromised with just a password.
- Security measures are in place and can be demonstrated with written evidence.
- An incident follows a procedure, not improvisation under pressure.
- Preparing for an external audit starts from documents that already exist.
What's included
Service components
Identity protection
Two-factor authentication for all accounts, conditional access rules and removal of legacy authentication protocols.
Email security
Filtering against phishing and dangerous attachments, plus correct configuration of SPF, DKIM and DMARC for your company's domain.
Device protection
Protection software on workstations and servers, disk encryption and updates rolled out in a controlled way.
Assessment of the current situation
We compare your existing configuration with the applicable requirements. The result is a prioritised list: what is missing, what is partly covered and what is already in order.
Incident handling
Who detects, who decides, who notifies and within what timeframe — written down before an incident, while it can still be thought through calmly.
Documentation that stands up to scrutiny
Policies, an inventory of equipment and accounts, access registers and a record of interventions. The documentation belongs to your company.
Frequently asked questions
What businesses ask us most often
If your question isn't here, write to us — we give concrete answers, and no quote before we understand your situation.
Request a quoteWe're a small company. Are we really a target?
Most attacks aren't targeted; they are automated. They look for accounts without two-factor authentication and unpatched systems, regardless of company size. Basic measures eliminate most of these cases.
Does our company fall within the scope of NIS2?
That depends on your sector, your company's size and your role in the supply chain, and determining it is a legal matter that you settle with your legal adviser. What we can say is that many companies are drawn in indirectly, as suppliers to an entity within scope, and receive security requirements from their clients.
Can you get us ISO 27001 certification?
No. Certification is granted exclusively by an accredited certification body, following an independent audit. We implement and document the technical measures, so that the audit starts from a prepared position rather than from scratch.
Can you guarantee that we will be compliant?
No, and no serious provider should. Compliance also depends on organisational, legal and process decisions that belong to your company. We take responsibility for the technical side: measures implemented correctly and the evidence that supports them.
Where do we start if our budget is limited?
With two-factor authentication, updates and verified backups. These are the measures with the best ratio of effort to risk removed.
Recommended
Related services
Backup & Disaster Recovery
Backups for data, servers and Microsoft 365, with restore testing.
DetailsIntune & Device Management
Consistent configuration, security policies and app deployment on laptops and phones.
DetailsNetworking & Wi-Fi
Network design and configuration, professional Wi-Fi, segmentation and remote access.
DetailsNeed IT that simply works?
We start with a short conversation and an assessment of where things stand — no obligation.