Cybersecurity and compliance, Dublin
Security advice
that stands up to audit.
Independent cybersecurity consultancy helping public sector and regulated organisations meet NIS2, strengthen governance, achieve compliance and design secure, resilient ICT environments.
and compliance
lower risk
and ISO 27001
real outcomes
Who we help
Public sector
Departments, agencies and public bodies with governance obligations, procurement rules and political visibility. Our home ground for 25 years.
Regulated organisations
Organisations in finance, health, energy and beyond, whose regulators, auditors and insurers expect evidence rather than assurances.
Enterprise Ireland clients
Exporting SMEs using the Cyber Security Review Grant to establish where they stand and what to fix first.
Services
What we do
NIS2
Applicability assessment, CyFun-based gap analysis, compliance against the NCSC Risk Management Measures
and the ISO 27001 route to certification. One team across all four, so evidence gathered once counts
everywhere.
NIS2 services
Cyber Security Review Grant
An independent, NCSC-aligned security review for Enterprise Ireland client companies, with 80% of the
cost covered by grant funding and a remediation roadmap you can act on straight away.
About the grant
Base27 ISMS platform
As an implementation partner for Base27, the European-hosted ISMS platform, we set it up around your
certified scope, migrate your risks and policies into it, and train your people, so the management system
keeps running after the auditors leave.
Base27 ISMS
Security architecture and advisory
Vendor-neutral design and review across identity, secure remote access, network segmentation, privileged
access and vulnerability management, grounded in deep hands-on experience of Cisco, Microsoft 365 and
Azure estates.
Cyber advisory
Independent by design
No licence sales. No vendor quotas. No predetermined solution.
We do not sell products and we do not resell licences, so when we advise on a SIEM, a SASE platform or a privileged access tool, the recommendation reflects your requirements and nothing else. The person who scopes the work is the person who delivers it, and everything we produce is written to survive procurement review and external audit, because that is where our work has lived for 25 years.
Selected engagements
Government department
Cybersecurity governance and NIS2 readiness
- Developed a seventeen-workstream NIS2 security programme
- Reviewed SOC and SIEM architecture and operational security
- Produced board-level cybersecurity governance and reporting
National agency
ISO 27001 implementation to Stage 2 audit
- Built the ISMS from a standing start, policies to Statement of Applicability
- Migrated legacy risk registers into the Base27 GRC platform
- Prepared evidence, staff and logistics for the certification audit
Enterprise security architecture
Segmentation and privileged access
- Designed a privileged, generic and service account governance framework
- Oversaw PAM implementation integrated with network access control
- Delivered zoning designs that contain incidents without stopping the business
Framework expertise
Evidence gathered once, reused everywhere
The NCSC Risk Management Measures, CyFun and ISO 27001 each provide a route to demonstrating compliance with the NIS2 Directive. We map your evidence across all three, so it is gathered once and counts towards every framework.
Start with a conversation
Most engagements begin with a short call to understand your environment and your obligations. If we are not the right fit, we will tell you so and point you in a better direction.
Contact us