Assess
Understand what works and what evidence or measures are missing.
Compare the three assessments →SERVICES & PRICINGFrom first insight to
From first insight to
lasting control.
ISO 27001, NIS2 and AI Governance. Find the support that fits your situation, see what you can expect and learn how we agree scope and pricing in advance.
An initial conversation is without obligation. No unnecessary programme.
START WITH YOUR QUESTION
Not every organisation needs the same programme.
Choose the outcome you need. An assessment may be the right first step, but when your scope is already clear, we can start with targeted implementation or testing.
Implement
Translate requirements and risks into practical roles and controls.
Test
Review whether agreed controls are actually in place and effective.
Sustain
Keep ownership, suppliers and security risks under control.
OUR SERVICES
Three disciplines. One coherent approach.
Our three core disciplines are equally important. For each, you can start with assessment, implementation or independent review.
INFORMATION SECURITY
ISO 27001
An ISMS that works, from a first assessment to audit and ongoing operation.
REGULATORY READINESS
NIS2
Turn scope, board accountability and security obligations into practical action.
RESPONSIBLE AI
AI Governance
Understand AI use and build accountable governance, including ISO 42001.
ADDITIONAL EXPERTISE
Focused support beyond the three disciplines.
Specialist activities are included only when explicitly agreed as part of the engagement.
Penetration testing
Scoped technical security testing through specialist partners, with usable findings.
Discuss penetration testingThird-party risk management
Make supplier dependencies, contractual responsibilities and risks visible.
Explore third-party riskPRICING & SCOPE
Know what you are committing to before work begins.
You receive a defined scope and agreed price before an engagement starts. Organisation size, locations, evidence availability and required deliverables affect the amount of work.
Starting prices for three defined assessments
A starting point for budgeting. The agreed scope, stakeholder interviews and available evidence determine the final quotation. Reporting is included; no certification or compliance guarantee is implied.
ISO 27001
Gap Analysis
from€ 2,495
Excluding VAT, report included
View service →NIS2Gap Analysis
from€ 1,995
Excluding VAT, report included
View service →AI GovernanceAssessment
from€ 1,995
Excluding VAT, report included
View service →Gap analyses & assessments
Fixed fee after a scope checkBased on scope, available documentation, interviews and agreed reporting.
Implementation & guidance
Project fee or agreed time budgetWith responsibilities, work packages, timeline and decision points.
Audits & penetration testing
Quote based on testing scopeAudit or testing scope, specialist effort and partner costs determine the fee.
You receive a tailored quotation for your agreed scope before work starts. All amounts exclude VAT.
HOW WE WORK
See sample reportsFrom first question to a useful outcome.
No open-ended engagement and no mandatory follow-up. Each stage has a clear decision or deliverable.
Explore
We discuss your situation, objective and starting point. If the scope is already clear, we avoid an unnecessary assessment.
Your question and desired outcome are clearAgree
You receive a written proposal covering scope, work, deliverables, stakeholders, assumptions, timing and price.
A defined engagement before we beginDeliver
We assess, support or test within the agreed scope. Your process owners remain responsible for internal decisions and actions.
Findings and progress are visibleConclude
We review the outcome and priorities. You can proceed independently or agree separate follow-up support.
A usable result and practical next stepsSEE THE DELIVERABLE
Reporting should support decisions.
For reviews and audits, we document the findings and priorities within the agreed scope. A sample report shows what this can look like.
View sample reportsILLUSTRATION · NO CUSTOMER DATA
Decision-ready overview
FindingsWhere controls need attention
PrioritiesWhat to address first
OwnershipWho can take each action
Next stepsA practical direction for delivery
FAQ
Frequently asked questions about services and pricing
Are prices fixed in advance?
For a defined engagement, you receive a written proposal with the scope, deliverables and project fee before work begins. Any specialist partner costs are included in the agreed proposal.
Can a gap analysis be a stand-alone engagement?
Yes. An ISO 27001 Gap Analysis, NIS2 Gap Analysis or AI Governance Assessment can be delivered as a complete stand-alone assignment. Additional work is optional.
Do you also support implementation and audits?
Yes. We support implementation and appropriate internal audits. Independence requirements and potential conflicts of interest are discussed before an engagement.
What does our organisation need to provide?
This depends on the service. The proposal describes required evidence, stakeholders, access and responsibilities for internal actions.
WANT TO DISCUSS YOUR SITUATION?
Request a free scope checkTell us what you are facing.
Whether you need an assessment, implementation support or a targeted audit, we can discuss the appropriate route. There is no mandatory follow-up.