Interim / Fractional CISO
Senior security leadership, available now.
An experienced CISO who owns your security strategy and reports to the board in business terms. Full-time for a fixed period, or one to three days a week on an ongoing basis.

One thread through all of it: someone senior who takes responsibility when the stakes are real. No tooling to sell, no reseller agreements. If we think you do not need us, we will say so.
Senior security leadership, available now.
An experienced CISO who owns your security strategy and reports to the board in business terms. Full-time for a fixed period, or one to three days a week on an ongoing basis.
Someone who has done this before, in the room.
We take command during an incident: what to shut down, what to tell staff and customers, when to notify the regulator. You keep running the business while we run the response.
Practice the bad day before you have it.
A realistic, integral exercise for your board, executive, and IT team, built on scenarios from actual incidents. You leave with a report of what worked, what did not, and what to fix first.
Security that respects uptime.
Assessments and advice for production environments, industrial control systems and critical infrastructure. We pick methods that keep the process running while we work.
Know what your AI is allowed to do.
Policy, risk assessment and ISO/IEC 42001 management systems for organizations already using AI, including agents that act on their own inside your processes.
Audit-ready, without the theatre.
Gap analysis through to certification for NIS2, ISO 27001 and IEC 62443. We prioritize the work that lowers real risk, not just the work that fills in the checklist.
Work on a Dutch government contract, and you have to meet it.
To work on a contract for the Dutch state, Defence or the police that touches national security, you must meet ABRO 2026, or ABDO if the contract was already in place. Without an ABRO-Verklaring from the national industrial security bureau, the NBIV, you do not start. We bring your organization to that level: baseline assessment, the security plan for that assignment, the security organization and the annual self-inspection.
Training for the people who decide.
Cyber risk masterclasses and crisis decision workshops for boards and management, taught by people who have handled real incidents. Certificates are verifiable online.