Audit & Compliance

Organizations seeking to audit their current GDPR compliance and get an overview of the compliance gaps that they may or may not be aware of.

• Comprehensive legal audit and review of the current organizational measures for personal data protection;

• Verification of personal data processing activities and their compliance with the new requirements of the Regulation;

• Consultations when changing and introducing new legal norms;

• Employee training

You will receive a comprehensive report containing a full gap analysis and recommendations for improving the introduced measures and their regulatory compliance with the newly adopted norms.

Organizations seeking to achieve full GDPR compliance.

• Preparation of rules and procedures for regulating activities under GDPR

• Analysis of personal data processing activities and their compliance with the new GDPR requirements;

• Analysis of the personal data used and legal grounds for their collection.

• Preparation of a Data Protection Policy.

• Work instructions and documents required for full compliance.

• Procedure for managing user requests, as well as the necessary forms.

• Drafting cookie policies for websites.

• Assistance in integrating the rules into the company’s daily work.

• Training of employees.

• Additional consultations.

Discover

• Find out what you have and where it lives.

• Be able to generate reports as evidence of the above

• Control access and ensure that it doesn’t fall into the wrong hands.

Identify

• Identify sensitive data and take steps to secure it using techniques like Encryption and Pseudonymization

• Track any data sharing with external parties

• Be able to pull an audit log of all such sharing activity

• Apply permissions to data using the principle of least privilege

Report:

• This is a key element of all compliance. You can do all of the above, but not having a way to demonstrate compliance is just as bad as not being compliant at all.

Organizations seeking to achieve or maintain ISO27001/2022 compliance.

We will conduct an internal ISO 27001 audit, according to the requirements of clause 9.2 of the ISO 27001/2022 Standard Information security, cybersecurity and privacy protection — Information security management systems — Requirements

You will receive a comprehensive report containing recommendations for improving, according to ISO 27001 and ISO 19011;

Organizations seeking to review their NIS2, SOC, DORA, GDPR compliance.

We conduct information security audits in relation to the requirements imposed by various regulatory bodies of financial institutions and a number of regulatory requirements defined by the “Cybersecurity Act”, “Ordinance on the Minimum Requirements for Network and Information Security”, General Data Protection Regulation (GDPR), NIS2, American SOC standards, HIPPA, etc.

You will receive a comprehensive report containing recommendations for improving, according to the chosen standard;

Organizations seeking to achieve or maintain NIS2, SOC, DORA, HIPPA compliance.

Drafting and providing comprehensive assistance in the implementation of information and cybersecurity rules and policies within organizations. Ensuring full compliance with regulatory frameworks such as NIS2, DORA, SOC, and HIPAA, including the development and refinement of new operating procedures and detailed Information Security Policies tailored to the organization’s specific needs.

Policies and procedures relating to complaints that the legislation recommended to be made.