We verify the effectiveness of the information security measures used. We examine whether processing entities protect your data in a way that minimizes the likelihood of leakage. We assess the risk and prepare a minimization plan, selecting the appropriate protection methods from the formal and technical side, including ICT.

We verify compliance with the requirements contained in the Regulation of the Council of Ministers of April 12, 2012, on the National Interoperability Framework (KRI), minimum requirements for public registers and the exchange of information in electronic form, and minimum requirements for ICT systems.

We perform compliance audits with the requirements specified in the National Cybersecurity System (KSC). Our auditors have certificates specified in the Act necessary to conduct KSC compliance audits: ISO 27001 Lead Auditor Information Security, 22301 Business Continuity, TOGAF 9, CISA, OSCP, Fortinet NSE, and others.

We prepare complete documentation for the Information Security Management System (ISMS) to ensure compliance with the requirements of ISO 27001 and ISO 22301, covering all aspects of security.

We also perform comprehensive ISMS implementations, helping organizations adequately protect their data and manage risk.

We carry out audits dedicated to healthcare (including hospitals) by Order No. 68/2022/BBIICD of the President of the National Health Fund of May 20, 2022, on financing activities to increase the security level of ICT systems of service providers.

The Polish Financial Supervision Authority (KNF) has issued key recommendations necessary to conduct business in the financial sector. 

Our role is to verify the compliance of your solutions with these requirements, with particular emphasis on the secure use of cloud computing, to ensure full compliance with KNF regulations and minimize risk.

We conduct compliance audits with the ISO 27001 standard based on hundreds of control points we have developed that cover all key areas of the standard. 

We verify the systems' resistance to various attack vectors that can lead to data leakage. We assess the risk and prepare a plan to minimize it by choosing appropriate protection methods (both formal and technical), including ICT solutions.