Services

Turn requirements into an operating model your team can carry.

Choose the entry point for your situation: define scope and build, bring existing data across, enable owners or stabilise ongoing operations.

Four pillars

The right entry point depends on the starting state

Each service delivers a defined outcome and can connect with the other building blocks.

Consulting

Gap analysis, build, audit preparation or vCISO: findings, rationale and next steps land in the workspace and remain with your team.

Onboarding

From scope and roles to the first usable working state. The scope follows your data, maturity and desired guidance.

Migration

HiScout, verinice, eramba, SAVe or Secfix. We move assets, risks, controls and documents into KaitoSec, structured and traceable.

Training

Awareness, admin and security officer practice, standards deep-dives. Modules booked individually or as a bundle, remote or on site.

Typical path

Not every team needs every building block. The path follows scope, existing work and the next mandatory date.

Stocktake against ISO 27001, BSI IT-Grundschutz or NIS2, with a prioritised action plan.

One guided working day from setup to the first operational workflow and handover.

We port your legacy ISMS data or build from scratch, mapped to your frameworks.

The team is enabled and the security officer is in the saddle. You decide what comes next: self-service, quarterly review or a vCISO mandate.

Bring your starting state, target operating model and next review or decision date. We define the appropriate service.