Governance check and implementation plan
after intro call
IT security governance
Rules that live in the system.
Security governance means policies, roles and evidence are not a document on a drive, but part of the systems people work with. We build the rules into workflows, interfaces and audit trails: who may do what, when a human approves, what is recorded and what happens in an emergency. Requirements such as NIS2 or the EU AI Act are treated as points of evidence. The legal assessment stays with your legal partner.
Typical starting point
01
“Security policies exist as a document, but nobody knows whether they hold up in daily work.”
02
“Access has grown over years; nobody has the full picture.”
03
“New duties such as NIS2 or the EU AI Act are coming, but there is no way to bring them into the systems.”
What we build
Policies that live in the system
Who may do what, which approvals are needed and what is recorded — we build this into workflows and interfaces instead of just writing it down.
Roles and access
Least privilege, clean separation down to the database, revocable access instead of shared accounts.
Audit trail and evidence
Every approval, every change and every agent run is recorded, with time, person and provenance.
Regulation as a point of evidence
Requirements from NIS2, the EU AI Act and sector-specific rules are mapped in a structured way, so you can answer customers and auditors. The legal assessment stays with your legal partner.
Incident response
Reporting paths, backups with a recovery test and a defined way back, practised rather than just documented.
Governance review
Regular reviews whenever systems, providers or duties change.
How it runs
Step 1
Inventory
Roles, access, audit trails and duties are captured and organised.
Step 2
Framework
Responsibilities, approval paths and reporting paths are agreed with you.
Step 3
Implementation
The rules are translated into workflows, interfaces and audit trails, in stages and testable.
Step 4
Operations
Reviews, incident exercises and adjustment when duties or systems change.
What you hold in your hands at the end
- Role and access concept, implemented in the system
- Audit trails with provenance for decisions and changes
- A place for the evidence required by duties such as NIS2 or the EU AI Act
- Emergency and reporting plan with a recovery test
- Handover to your team or ongoing support
Fees
Implementation in the system
from €950 / day
Ongoing reviews
from €290 / month
Frequently asked questions
Contact
Let's talk about your project.
Write to us briefly about what it is about. You will receive a personal reply.