Compliance and infrastructure
Ready for your ISO 27001 or ENS audit, with systems that back it up.
We check your infrastructure and controls against the standard, show you the gaps, plan the fixes and help your team put them in place. When the auditor arrives, the evidence is ready.
What is included
Infrastructure assessment
How your systems are set up today, and where configuration or missing controls create risk.
Gap analysis
Your current controls mapped against ISO 27001, ENS or NIST CSF, with each gap explained.
A prioritised roadmap
What to fix first, who does it and by when.
Hands-on implementation
Policies, procedures and technical settings, done alongside your team so daily work keeps running.
Audit readiness
Documentation and evidence organised for the auditor, and support during the audit.
NIS2 and GDPR context
We show which of your obligations each control helps with. [CONFIRM: depth of NIS2/GDPR advice offered]
How it works
- 01
Assess
We review your architecture, systems and existing controls.
- 02
Compare
We run the gap analysis against the framework you need.
- 03
Plan
You get a roadmap with clear priorities and milestones.
- 04
Implement and prepare
We support the changes and get the evidence ready for the audit.
We have helped clients achieve ISO 27001 and ENS certification.
Works well with
How our services fit together
Governance and compliance
- Compliance and ISO 27001You are here
From gap analysis to audit-ready, for ISO 27001, ENS and NIS2.
- Virtual CISO
A senior security lead for strategy, risk and your board, without a full-time hire.
A plan, an owner and the proof that auditors and clients ask for.
Questions about compliance
How long does it take to get ready for ISO 27001?
It depends on your size and where you start. After the gap analysis we give you a realistic timeline. [CONFIRM: typical range, if Raul wants one shown]
Do you issue the certificate?
No. Certification is issued by an independent, accredited body. We prepare you and support you through the audit.
ISO 27001 or ENS: which do we need?
ENS applies if you work with the Spanish public sector. ISO 27001 is the international standard most private clients ask for. Many companies need both, and much of the work overlaps.
Does this help with NIS2?
Yes. Many NIS2 measures match ISO 27001 controls, so the same work covers much of both.
Start with an outside view.
The free Exposure Review shows in 48 hours what anyone can already see about your company. It is a useful first input for any gap analysis.