Build Resilience.Prove Compliance.Secure Your Business.

Security, made practical: a security officer on retainer, ISO 27001, NIS2, GDPR and AI Act readiness, internal audits and Microsoft 365 security for European SMEs, built on the tools you already own.

Book a consultation
Services

How we can help

From a security officer on retainer to an audit-ready ISMS: pick what fits your organisation, or combine.

All services
01

vCISO & security officer on retainer

Senior security leadership for your organisation, without a full-time hire.

View this service
02

ISO 27001 implementation & audit readiness

From gap analysis to a certification audit you are ready for, with ISO 27701, ISO 9001 and ISO 14001 as extensions.

View this service
03

NIS2, GDPR & AI Act readiness

Know which rules apply to you, what they require, and how to meet them without overbuilding.

View this service
04

Internal audits

Independent internal audits for ISO 27001 and integrated management systems.

View this service
05

Microsoft 365 security & access governance

Get the most out of the security you already pay for, and stay in control of who has access to what.

View this service
Insights

Practical guidance, by subject

All insights
  1. 01NIS2 & CyberbeveiligingswetWhat the Cyberbeveiligingswet means for Dutch SMEs: scope, mandatory registration at mijn.ncsc.nl, 24-hour incident reporting, director liability, and supply-chain obligations.
  2. 02AI ActWhat the EU AI Act means for SMEs using or building AI systems: risk classification, prohibited practices, obligations for providers and deployers, and how it intersects with the ISO 27001 and NIS2 compliance work already underway.
  3. 03ISO 27001Practical guidance on ISO 27001:2022, covering clauses 4 to 10, the Annex A controls, certification readiness, internal audit and management review.
  4. 04ISO 42001ISO/IEC 42001 is the international standard for an AI management system (AIMS): governance, risk management, and lifecycle controls for organizations developing or using AI responsibly, and how it complements an existing ISO 27001 ISMS.
  5. 05GDPR & PrivacyGDPR (AVG) compliance for European SMEs: DPIAs, processor agreements, retention schedules, breach notification and the Dutch reporting duties.
  6. 06Microsoft 365 as your ISMSM365 Business Premium as the compliance backbone for SMBs: turn the Microsoft 365 licences you already pay for into ISO 27001 and NIS2 control evidence with Entra ID, Intune, Defender, Purview and the automation that closes the gaps.
  7. 07Templates & ToolsFree, ready-to-use templates and reference material: SoA templates, risk registers, policy packs, gap-assessment checklists, and plain-language definitions of common security terms.
Microsoft 365

The licence you already pay for, mapped to the controls

Pick a tool and see which ISO 27001 and NIS2 requirements it helps you meet.

Microsoft 365 and ISO 27001

Entra ID

Identities, MFA and Conditional Access: who gets in, from where, on what device.

✓ Included in Business Premium8 controls supported

ISO 27001:2022 Annex A

  • A.5.15Access control
  • A.5.16Identity management
  • A.5.17Authentication information
  • A.5.18Access rights
  • A.8.2Privileged access rights
  • A.8.5Secure authentication

NIS2 Art. 21 measures

  • 21(2)(i)Access control policies
  • 21(2)(j)Multi-factor authentication

Indicative mapping. Tools support a control; your policies and processes complete it.

Free resource

Microsoft 365 Security Checklist for Small Businesses

The settings and habits that matter most for a small business running Microsoft 365, without a dedicated security team.

Get the checklist →
Knowledge base

Latest articles