Know
A live inventory of systems, AI tools, data and suppliers.
Training & capacity
Compliance is your first line of defence.
Most companies treat compliance as paperwork and security as a separate fight. That is backwards. Get the basics right across the whole company and your security budget can finally go where it matters.
Why compliance comes first
Compliance shrinks the battlefield.
Attackers don't pick the best defended door. They pick the cheapest one. A forgotten account. An AI tool nobody approved, holding customer data. A supplier with more access than anyone remembers. A password in a shared document.
Those doors are spread across the full width of your company, and no security budget can guard all of them. Compliance done properly closes them: you know which tools you use, who has access, where your data goes and which suppliers you depend on.
What remains is a short list of places worth attacking. And those are exactly the places where you already invested in protection. Your security stops being spread thin. It becomes focused.
Without a foundation
With a foundation
- Know what you have
- Limit who can reach it
- Guard what is left
Cyberweerbaarheid
Resilience is not a tool. It's a habit.
Cyber resilience means you can take a hit and keep running. It rests on four things, and every one of them starts with your people.
Limit
Access, data flows and supplier rights cut back to what is needed.
Respond
Everyone knows what an incident looks like and who reports it. NIS2 expects an early warning within 24 hours for significant incidents.
Recover
Backups, decisions and responsibilities agreed before you need them.
Trainings
People who know what to do.
AI literacy
AI literacy for every team
Required under the AI Act (article 4) since 2 February 2025 for everyone who works with AI. Practical, not theoretical: what you may put into an AI tool, what you may not, and how to recognise a risk.
What you keep
Training material, a team action list and an attendance record you can show as evidence.
[HALF DAY · ON SITE OR ONLINE]
Board & management
For directors and boards
Under the Cyberbeveiligingswet, management approves the cybersecurity measures, oversees them and must be trained. We cover what you are accountable for, what to ask your team, and what good evidence looks like.
What you keep
A board checklist, a quarterly oversight format and an attendance record.
[2 HOURS · BOARDROOM SESSION]
Process owners & teams
For the people who run the processes
Shadow AI, data leaks, prompt injection and incident reporting, explained with examples from your own sector. Teams leave knowing what to do on Monday.
What you keep
An action list per process and the materials to train new colleagues.
[HALF DAY · WORKSHOP]
Capacity
Extra hands that already know the rules.
Sometimes the problem is not knowledge. It is time. We place specialists inside your team for a fixed period, so the work gets done while your people keep running the business.
Interim AI compliance officer
Builds and runs your AI register, policies and DPIAs until someone internal can take over.
NIS2 implementation lead
Takes you from registration to duty of care and incident reporting, step by step.
Security & awareness lead
Turns findings into habits: access reviews, supplier checks, awareness rounds.
- Fixed term
- [X] days per week
- Work stays in the platform when we leave
[Where needed we work with a vetted partner network.]
Request capacityTell us what your team needs.
Step 1 of 2
Choose how and when we meet.
After that we ask for a few details.
No time picked yet? We will plan one with you.