How We Work

Our 6-phase process — transparent, documented and tailored to SMEs.

Phase 1

Initial Diagnosis

A free 30-minute call. We analyse your current situation: what you have, what you’re missing and what risks you face right now. You’ll leave with a clear map of your starting point.
⏱ 30 min · 📋 Initial risk map · 👤 Availability for the call

Phase 2

Personalised Action Plan

We design a roadmap tailored to your sector, size and budget. We prioritise the highest-impact measures and explain the reasoning behind every decision. No generic templates.
⏱ 3-5 days · 📋 Prioritised roadmap · 👤 Plan review and sign-off

Phase 3

Layered Implementation

We roll out measures gradually and in a controlled way, without disrupting your business. Each layer is documented and verified before moving to the next.
⏱ 4-12 weeks · 📋 Implemented measures + documentation · 👤 1-2h/week of follow-up

Phase 4

Training and Support

Your team needs to be able to maintain what we build together. We train the key people, clarify procedures and guide you through your first independent steps.
⏱ 2-4 sessions · 📋 Guides and reference materials · 👤 Key people’s participation

Phase 5

Verification and Evidence

We carry out a structured review to confirm everything is working correctly. We generate the documentary evidence you’ll need in an audit or external inspection.
⏱ 2-3 days · 📋 Verification report + evidence · 👤 Access to systems

Phase 6

Continuous Improvement

Cybersecurity is not a one-off project. We periodically review your compliance level, alert you to relevant regulatory changes and adjust the plan as your business evolves.
⏱ Quarterly/annual · 📋 Reports and regulatory alerts · 👤 Communicate relevant changes

Let’s start with a 30-minute call

No commitments. We’ll tell you exactly where you stand and what you need.