GDPR and data protection
Review how personal data is collected, used and shared. Identify gaps in documentation, responsibilities and privacy risk management.
EU AI Act
Map AI systems and use cases, clarify your organisation’s role and plan the governance and documentation work relevant to your activities.
NIS2 Directive
Assess readiness across cybersecurity governance, risk management, supplier oversight and incident reporting.
Critical Entities Resilience (CER) Directive
Review risks to essential service continuity and identify priorities for prevention, response and recovery.
What an assessment can produce
Depending on the scope, the work can provide a map of relevant requirements, a summary of gaps and an action plan with priorities and responsibilities. For NIS2 and CER, the review considers applicable national rules.