Compliance Cyber Security

We conduct an applicability screening of cybersecurity regulations (such as NIS2 and the DORA Regulation) and relevant industry standards (such as ISO or NIST), as well as risk and impact assessments from both legal and technical perspectives involving processes, vendors, and systems:

• We support clients in conducting gap analyses and identifying, prioritizing, and implementing remediation actions;
  
• We also assist with vertical assessments and independent audits of critical processes, including metadata management, cookies, logs, passwords, and more.
  

• We assist in drafting legal remediation measures (e.g., governance models, policies/procedures, internal rules, etc.);
• We support the identification of technical remediation measures aimed at reducing risks identified during the assessment phase. These include strong authentication and encryption protocols, secure password management, privileged access management (PAM), vulnerability management, Data Loss Prevention (DLP), Incident Response Management, Disaster Recovery & Business Continuity planning, and more.

• We offer consulting services as Cybersecurity Officers, Chief Technology Officers, and Cybersecurity Auditors;
• We provide audit services for processes, vendors, and systems, as well as conduct periodic testing of IT infrastructure security;
• We design and carry out inspection simulations.

• Litigation: We offer effective support during investigations, inspections, and legal proceedings (e.g., before Data Protection Authorities or civil courts);
• Non-contentious: We provide clear and precise legal opinions on cybersecurity issues (such as strong authentication, encryption, secure password management, PAM, vulnerability management, DLP, Incident Response, Disaster Recovery & Business Continuity), often intersecting with other fields like privacy, labor law, whistleblowing, cookies, marketing, profiling, social media, and AI;
• Contractual: We draft, review, and negotiate supplier contracts, clauses, and agreements (e.g., cloud services, ICT contracts, and smart contracts);
• Strategic: We support clients in cybersecurity design for strategic projects, processes, and tools with a business-oriented approach. developed through decades of collaboration with departments such as HR, IT, Digital, Marketing, and Procurement;
• Spot: We provide on-demand support in managing high-impact incidents (including analysis, authority notification, and media relations).

• Training: We deliver online or in-person cybersecurity training, standard or customized, for all relevant stakeholders (employees, top management, technical staff, and more);
• Awareness: We offer short courses and video modules, tailored or standardized, for all stakeholder groups;
• Information: We provide ongoing updates on regulatory, case law, and academic developments in the cybersecurity field.