Compliance + Cyber Bundle
GDPR/NIS2 compliance paired with a security audit and training: all inclusive. 20% bundle discount.
discount
-20%
Duration
1 month - 3 months
What's included
Start with a 15-minute call, free and with no commitment
NIS2 and GDPR raise overlapping questions: who has access to what, how to respond to an incident, how to prove it. This bundle tackles both together, from audit to implementation, with team training and an external DPO for six months. You work from a single roadmap instead of two parallel projects.
Who it is for
- SMEs falling within the scope of the Belgian NIS2 law
- Suppliers to NIS2 entities facing contractual requirements
- Companies processing sensitive personal data
- Organisations without a DPO or compliance lead
What you get
- Security audit and NIS2/GDPR gap analysis
- Priority corrective measures implemented
- Record of processing and breach notification procedure
- Teams trained on their GDPR obligations
- External DPO for 6 months
How it runs
- 1
Audit and gap analysis
Assessment of your security against the CCB CyberFundamentals and a review of your GDPR practices.
- 2
Shared roadmap
A single action plan combining NIS2 and GDPR requirements, ranked by priority.
- 3
Remediation
Implementation of technical and organisational measures: access, MFA, backups, email security, internal policies.
- 4
GDPR documentation
Record of processing, impact assessments where needed, a data breach procedure and privacy notices.
- 5
Team training
A practical GDPR session: what everyone can do, what to avoid and what to report.
- 6
DPO support
For six months, an external DPO answers your questions and oversees implementation.
Formats
- Programme of 1 to 3 months
- On-site and remote
- Training in French, Dutch or English
Prerequisites : An internal contact to lead the compliance project with us.
Frequently asked questions
Does this bundle make my company NIS2 compliant?
It brings you to a documented, defensible level, but compliance is an ongoing effort and remains your responsibility. Registration with the CCB and any inspections concern your company; we help you prepare for them.
What does the external DPO do?
They advise on your data processing, review documentation, support you during a data breach and can act as contact point with the Belgian Data Protection Authority if you appoint them formally.
What happens after six months?
You can take the role in-house using the documentation produced, or extend the support.
Let's talk about your team
15 minutes is enough to tailor the content, format and date. We agree three indicators together before we start.