Skip to content
AFRISCON

Advisory, governance & compliance

Turn risks into decisions and action.

Cybersecurity strategy, ISO 27001, risk management and virtual CISO support to structure your security program.

How we help

Advisory, governance & compliance

  • Governance, policies and cybersecurity roadmap
  • ISO 27001 readiness and risk assessment
  • CISO leadership and regulatory readiness
Discuss my needs

Related services

Cybersecurity strategy & governanceISO 27001 implementation & internal auditISO 27005, EBIOS & risk managementDORA & PCI DSS readinessPolicies, procedures & security frameworksVirtual CISOISO 27001 maturity self-assessment

Scope, engagement terms and deliverables are agreed with you during an initial scoping phase.

The ISO 27001 continual improvement cycle

Diagram of the four-phase ISO 27001 cycle around the information security management system (ISMS), supported by a virtual CISO: plan, do, check, act, then start again.

  1. Plan · Scope and assess risksISO 27005 and EBIOS Risk Manager risk analysis, security policy, roadmap.
  2. Do · Implement the controlsPolicies and procedures, ISO 27001 controls, staff awareness.
  3. Check · Measure effectivenessISO 27001 internal audit and tracking indicators.
  4. Act · Decide and improveManagement review, action plan, DORA and PCI DSS regulatory readiness.
Frameworks
  • ISO 27001
  • ISO 27005
  • EBIOS RM
  • DORA
  • PCI DSS

Certification is issued by an accredited body: we prepare your organization for the certification audit.

Let’s take action

Your security starts with a conversation.

Let’s discuss your project