NIS2 Quickscan
An indicative first picture of applicability, duty of care, incident reporting, chain and evidence.
View NIS2 Quickscan →
Research, advice and implementation
Information security and digital resilience services
Kynexis helps you to investigate digital risks, choose the right priorities and implement improvements. You can start with a first exploration or directly opt for in-depth research, implementation or structural direction.
Orientation and investigations
Forms of research for each decision question
Choose the form of research that suits your decision question, desired depth and available information.
NIS2 study
From an initial indication to a substantiated GAP and independent review of its operation.
NIS2 GAP Analysis
Supporting your position on duty of care, governance and chain.
View NIS2 GAP Analysis →NIS2 audit
Independent testing of how NIS2 measures and agreements work in practice.
View NIS2 audit →Information security and risk management
Choose the research level that suits your starting point, decision-making question and desired security.
Quickscan cybersecurity
A self-contained first orientation with direct score and partial scores.
View Quickscan cybersecurity →Information security baseline assessment
A broad and relatively compact starting image with risks and priorities for improvement.
View Information security baseline assessment →Cybersecurity Assessment
Focused on in-depth research into a technical, organizational or combined demand.
View Cybersecurity Assessment →Cyber Security Audit
Independent review of predefined criteria, with traceable evidence and audit conclusion.
View Cyber Security Audit →Information security risk assessment
Translate risk scenarios, impact and risk readiness into treatment choices.
View Information security risk assessment →Standards and governance
Research on standards and governance principles, concrete questions of design, ownership and evidence.
ISO 27001 GAP Analysis
Identify what is necessary for a working and demonstrable ISMS.
View ISO 27001 GAP Analysis →Governance gap analysis
Governance principles test ownership, evidence and digital control.
View Governance gap analysis →Improving and implementing
Convert findings into working control
Bring together policies, processes, behaviour, technique and evidence in an executable improvement cycle.
Implementation and securing
Translate requirements and findings to a working facility with ownership, proof and a fixed improvement cycle.
Information security policy
Develop, implement and ensure policies from risk, roles and daily execution.
View Information security policy →ISO 27001 implementation support
Building a working ISMS and preparing for certification.
View ISO 27001 implementation support →ISO 27001 internal audit
Objective tests to determine whether it is detectable and works in practice.
View ISO 27001 internal audit →NIS2 advisory and implementation
Duty of care, incident reporting, chain control and governance work.
View NIS2 advisory and implementation →Internal control information security
Connecting risks, controls, evidence, owners and reporting.
View Internal control information security →Awareness and behaviour
Make safe behaviour recognizable, applicable and part of daily work.
Improve security awareness
Connect learning and practicing to observeable safe behaviour.
View Improve security awareness →Security Awareness Training
With repetition and short learning moments, work structurally towards safe behaviour.
View Security Awareness Training →Security Awareness Workshop
An interactive impulse with recognizable situations and practical actions.
View Security Awareness Workshop →Incidents and board-level resilience
Prepare people and decision-making for current threats, incidents and digital risks.
Incident management
Prepare for incidents and organise direction when necessary.
View Incident management →Lecture cybercrime
An understandable, up-to-date and interactive lecture for conference or customer day.
View Lecture cybercrime →Boardroom cyber sessions
An board-level risk dialogue on continuity, chain, AI and demonstrable control.
View Boardroom cyber sessions →Management & IT Cyber Risk Workshop
Executive Board and IT together make a first cyber risk analysis for their own organisation.
View Management & IT Cyber Risk Workshop →Consulting and directing
Senior expertise at the time your organisation needs it
From an independent second opinion to temporary direction on a complete improvement program.
Cybersecurity consultancy
Independent advice, second opinion and periodic Trusted Advisor deployment.
View Cybersecurity consultancy →Cybersecurity management
Risks, priorities, ownership and reporting in a fixed direction cycle.
View Cybersecurity management →CISO as a Service
Temporary senior management on risks, policies, suppliers, reporting and execution.
View CISO as a Service →Select new IT service provider
Independent supervision of requirements and market exploration to contract, transition and assurance.
View Select new IT service provider →Additional expertise
Specialist support for acquisitions and NIS2 responsibility
For acquisitions and investments, specialist research is available through Pravus. Board members and supervisors who want to focus on NIS2 and the Dutch Cybersecurity Act can contact NIS2 Boardroom Training.
PRAVUS
IT, Cyber and Privacy Due Diligence
Research and risk management before, during and after a takeover or investment.
View IT, Cyber and Privacy Due Diligence at Pravus →NIS2 BOARDROOMTRAININGNIS2 training for governance and oversight
A targeted training on board-level responsibility, duty of care, oversight and demonstrable control.
View the NIS2 training for directors and supervisors →