COMPLIANCE & SECURITY
Practical compliance and security work
Implementation, gap analysis and audit preparation for the frameworks your business has to meet. Certification is done by accredited bodies; my part is making the controls work in practice.
ISO 27001
Readiness and implementation: gap analysis against Annex A, technical controls and evidence for the audit.
NIS2
Technical measures for risk management, incident handling, backup and supply-chain security.
PCI DSS
Technical controls around the systems that store, process or transmit card data.
Security consulting
Hardening, access reviews and authorised security testing, always with written scope and permission.
Financial sector
For financial entities, the same controls also support DORA requirements on ICT risk and resilience.
I do not issue certificates and do not claim to hold one. The goal is a well-prepared audit by the body you choose.
Tell me what is wrong with your environment.
Send a short description. I will reply by email to arrange a call.