Advisory services

We deliver full implementation of cyber security for essential and important entities under the Croatian Cybersecurity Act. We cover everything from establishing...

We establish every personal data protection process - from the record of processing activities and impact assessments to DPO support and breach notification to...

Gap analysis, ISMS implementation, risk assessment, Statement of Applicability and full preparation for the certification audit against ISO/IEC 27001:2022.

QMS implementation, process documentation, quality objectives and KPIs, and preparation for the certification audit.

EMS implementation - identification of environmental aspects and impacts, a legal compliance register, carbon footprint reduction and certification readiness.

Business impact analysis, RTO and RPO definition, business continuity and disaster recovery plans, exercising and preparation for certification against ISO...

Compliance with the EU DORA regulation for the financial sector - ICT risk management framework, third-party risk, resilience testing and regulatory reporting.

Third-party risk assessment, due diligence questionnaires, automated risk scoring, continuous monitoring and contractual security clauses across the supply chain.

Penetration testing, vulnerability assessment, configuration review, social engineering simulations and reports written for both technical and board-level...

We carry out internal audits of management systems and compliance reviews, and we walk your documentation the way an external auditor or certification body will...

We take on the data protection officer function. An external DPO is expressly provided for by the GDPR and for most organisations is cheaper and more independent...

Measure 1 of Annex II requires a named responsible person who sets direction, reports to the board and secures resources. For most organisations a permanent hire...