Cybersecurity & Compliance
We set up defences that let your team detect, contain and recover from incidents, and pass an independent audit.
What the technology gives you
Attacks are spotted early, before they reach critical systems. After an incident, work gets back to normal quickly. Customer data, contracts and financial records are better protected from leaks and ransomware. Large customers and partners get proof of your security, so their checks do not delay deals. Staff work safely from home or while travelling, without needless hurdles. We assess risks, put protection in place, run it and prepare you for an independent audit.
What’s included
- Access management
- Attack detection and response
- Protecting legacy systems
- Certification readiness
What it solves
Former staff still have system access
Access closes as soon as the HR system records a departure.
Staff have more rights than they need
Rights follow the job role, and every quarter we check which are still needed.
Hundreds of alerts, and nobody reads them
We tune detection rules before launch, so analysts see only the alerts that need action.
We can’t patch vulnerabilities fast enough
Vulnerabilities are ranked by risk, and those that attackers already exploit are fixed first.
Incident reports to the regulator take days
Logs and evidence are collected in advance, so an incident report takes hours.
Security duties are scattered across teams
All requirements sit on one risk map, and every control has a named owner.
When you need it, and when you don’t
You need it
- your organisation falls under NIS2, DORA or National Bank of Ukraine rules
- an ISO/IEC 27001 audit, security authorisation or KSZI review is coming
- a new system will handle sensitive data
You don’t
- you only need to check one application before launch: a penetration test is enough
- no regulator requires anything and baseline risks are under control: a yearly security check is enough
How we do it
- 01
We protect old systems without rewriting them
We put a gateway that checks every user in front of each system, and split the network into separate segments. Rewriting an old system for new security demands takes years and overruns the budget.
- 02
Processes first, then the certificate
We write policies from how the team already works. Otherwise the certificate stays on paper and fails at the first attack.
- 03
AI drafts, the analyst acts
AI adds context to alerts and drafts a finding; only an analyst can isolate a computer or lock an account. If AI is wrong or unavailable, it is switched off and detection keeps running on its usual rules.
Project stages
- 3–4 weeks
Security assessment
What to protect, how attacks could come and what is missing, before any purchase.
- 2–3 weeks
Architecture
The order of changes to network, access and monitoring.
- 6–8 weeks
Quick wins
Phishing‑resistant two‑factor sign‑in, control of admin rights and a recovery check.
- 6–9 months
Compliance
Rules and controls, evidence for the auditor and internal reviews.
- ongoing
Continuous operations
Hunting for hidden threats and training the team to act during an incident.
Platforms and standards
Splunk · Microsoft Sentinel · IBM QRadar · Elastic Security
Okta · Microsoft Entra ID · CyberArk · BeyondTrust · HashiCorp Vault
Palo Alto Networks · Fortinet · Zscaler · CrowdStrike · Microsoft Defender for Endpoint
ISO/IEC 27001:2022 · NIST CSF 2.0 · NIS2 · DORA · CRA · KSZI
Questions
When does NIS2 apply, and to whom?
NIS2 works through national law, so we check dates and duties by country, sector and size. EU clients alone do not bring a Ukrainian company into scope, though supply‑chain duties may apply.
How much does ISO/IEC 27001 certification cost?
Audit cost depends on headcount and sites, and a certificate runs three years with annual surveillance audits. Most of the cost is putting controls in place, so we quote after a gap analysis.
Do we need a SOC if we have a SIEM?
A SIEM collects and matches events from all systems; a SOC is the team that investigates incidents and responds. You can build your own or buy it as a service.
Further reading
Let’s talk about your security
Thirty minutes with a security architect to work out where to start.