Compliance you can evidence
NIS2, GDPR and customer audits are not satisfied by looking tidy, but by what you can show. We build the evidence into daily operation instead of collecting it before every audit.
30 minutes · no sales pitch · an honest read on whether we fit
The difference that matters
Most environments are safer than their documentation suggests. In an audit, only what can be evidenced counts.
- Who was allowed to access what, and when
- Where personal data actually sits
- Which device state applied at the time of an incident
- How a report gets filed inside the deadline
Four pieces of work that build on each other
Ordered by effect: first know where you stand, then close the gaps, then make the evidence produce itself.
- C.01Gap analysis against NIS2 and your customer requirements. Your environment measured against the requirements that actually apply to you, including the questionnaires your customers send.Outcome: a prioritised action list with effort estimates and a version for the board.
- C.02Classification and information protection. Sensitivity labels that match the reality of your documents, and rules that limit leakage without blocking the work.Outcome: an evidenced answer to where sensitive data sits.
- C.03Recertification and permission clean-up. Clearing external shares, guest accounts and historical permissions, and establishing the cycle that stops it drifting apart again.Outcome: a recurring process instead of a one-off clean-up.
- C.04Evidence in daily operation. Logs, reports and exports set up so the evidence is produced as a by-product rather than in the week before the audit.Outcome: audit readiness without a special project.
What sits underneath
These services belong to this area and can be commissioned individually.
What we do not do
Being clear up front saves us both a conversation.
No legal advice
We implement technically and document traceably. The legal assessment stays with your lawyers.
No certification on paper
We do not build a paper trail with nothing behind it. If a requirement is not technically met, the report says so.
No licence for tools you do not need
If your existing licences are enough, we say so, even when an extra tool would make our route more comfortable.