Audit & Roadmap
You know what to fix first, and why: security audit, GDPR/NIS2 check, 30, 60 and 90-day action plan.
Starting from
120€/h*
Duration
2 days - 5 days
What's included
* Entry hourly rate excluding VAT, preparation and travel. The final price depends on group size and format: request your quote, answer within 48 h.
How secure is your business?
2 minutes, free, no intrusive testing.
Start with a 15-minute call, free and with no commitment
A useful audit is more than a list of vulnerabilities: it tells you what to fix first, and why. TrAInyng assesses your organisation, devices, accounts and backups using the CyberFundamentals framework of the Centre for Cybersecurity Belgium (CCB). You leave with a realistic action plan for the next 30, 60 and 90 days.
Who it is for
- Belgian SMEs directly or indirectly affected by NIS2
- Suppliers whose customers ask for security assurances
- Managers who want to prioritise their IT budget
- Organisations handling sensitive personal data
What you get
- Overview of your critical assets and related risks
- Maturity level assessed against the CCB CyberFundamentals
- NIS2 and GDPR gap analysis
- 30/60/90-day action plan with priorities and estimated effort
- Executive report for management, technical report for IT
How it runs
- 1
Scoping
Together we define the scope, the contacts and your obligations (NIS2, GDPR, customer requirements). You know from the start what will and will not be assessed.
- 2
Interviews and documents
Conversations with management, IT and business teams, followed by a review of what exists: policies, contracts, backup procedures.
- 3
Technical checks
Review of devices, accounts and access rights, email (Microsoft 365 or Google Workspace), backups and network, with your consent and without disrupting operations.
- 4
Risk and compliance analysis
Each finding is linked to a business risk and to the relevant NIS2 or GDPR requirements.
- 5
Prioritised roadmap
Actions are ranked by impact and effort across 30, 60 and 90 days, to guide your investments.
- 6
Debrief
Results are presented to management and the reports handed over. The audit is advice: implementation remains your decision, with or without our help.
Formats
- On-site and remote audit
- 2 to 5 days depending on size and complexity
- Executive, technical and compliance reports
- Debrief meeting with management
Prerequisites : A point of contact in management and access to your IT lead or IT provider during the audit.
Frequently asked questions
Is my company covered by NIS2?
It depends on your sector, size and position in the supply chain. Scoping checks your situation; even if you are not directly in scope, customers subject to NIS2 may require assurances from you.
Does the audit guarantee my company is secure?
No audit can guarantee that. It gives an honest picture of your risks at a given moment and a plan to reduce them measurably.
How does it differ from the Express Diagnostic?
The free diagnostic only looks at what is visible from outside. The audit examines your organisation, systems and procedures from the inside, with interviews and technical checks.
Let's talk about your team
15 minutes is enough to tailor the content, format and date. We agree three indicators together before we start.