Compliance & insurance
NIS2, ISO 27001 and cyber-insurance: regulation becomes an action plan
We turn your obligations into costed, measurable workstreams — so you're compliant, insurable and credible with your clients, your principals and your insurers.
Note: this page presents our compliance offering (marketing). The company's legal compliance statement (declared activity, GDPR role, insurance) is on the Legal compliance page.
NIS2
The directive extends its requirements to many organizations previously spared: risk-management measures, supply chain, incident notification, management accountability.
- Determining whether you're in scope (essential / important entity)
- NIS2 gap analysis vs your existing processes
- Prioritized, dated compliance plan
ISO 27001
An information security management system (ISMS) that structures, beyond certification: governance, risk control and continuous improvement.
- Step-by-step certification roadmap
- Drafting of essential policies and procedures
- Audit preparation (gap and management review)
Cyber-insurance
Insurers are tightening their questionnaires and making coverage conditional on verifiable controls. We make you insurable.
- Upgrading required controls (MFA, EDR, backup)
- Evidence pack for underwriting or renewal
- Support in the event of a claim (incident response)
Method
Measure, prioritize, prove
Assessment
A snapshot against the target framework, in days, not months.
Prioritization
An action plan ranked by regulatory impact and remediation cost.
Implementation
We carry out or drive the technical and documentary workstreams.
Proof
Compliance indicators and an evidence pack you can present to third parties.
Related resources
The NIS2 checklist and the ISO 27001 roadmap
Downloadable to frame your first decisions, before you even talk to us.