Service · Starting from scratch
Gap analysis against a framework
We measure where you stand against ISO 27001, the ENS or DORA and what you still need to comply.
Get in touch about this serviceWhat stays
Stays in Compliance: the status of every control in your statement of applicability. The prioritised action plan is delivered as a report.
If you use the platform. If not, we hand it over as a report.
What it includes
- Interviews with the owners of each area
- Review of the policies, procedures and evidence you already have
- Status of every control, with its justification
- Prioritised action plan
When
Once
How it is delivered
Step 1
Fixed-scope engagement
We agree scope, deliverable and calendar in a written proposal.
Step 2
Work with your team
We work with your owners and, if you use the platform, inside it, with the access you grant us.
Step 3
You approve
If you use the platform, the result stays in its module and you approve it; if not, we hand it over as a report.
Step 4
Next time starts here
What stays is the starting point for the next review, not a document that gets lost.
Goes well with
- Service · Every year
Risk assessment
The annual risk assessment of your security system, with MAGERIT and PILAR when it is for the ENS.
- Service · Every year
Pre-certification audit
We audit your system the way the certification body would, so you can fix things before the real audit.
- Service · When you start
Data migration from spreadsheets
We bring into the platform what you keep today in spreadsheets or another tool.
Shall we talk about this service?
Tell us where you stand and we will send you a fixed-scope proposal.