General Services Directory
Practical Security Advisory & Resilience Services guided by the Unified Sentinel Protocol
From targeted assessments and regulatory alignment to operational process implementation, awareness culture building, and fractional CISO leadership, we help mid-sized organisations become defensibly secure and resilient.
-
All assessments are designed to be performed in logical sequence, but you can enter at any point that matches your current maturity. Contact us for bundeld discounts.
Baseline Assessment: Deep dive into your current Security, People and Risk posture (ideal after initial SPR Posture Scan and strategy work)
Price: €2,800
Maturity Assessment: Clear measurement of how mature and sophisticated your security processes really are.
Price: €1,800
Threat Assessment: Business-focused “Who, How and Why” analysis of credible threats to your organisation.
Price: €2,800
Vulnerability Analysis: Structured, non-technical review of weaknesses in processes, systems and controls.
Price: €2,800
Risk Assessment: Quantified risk register: Risk = Threat × Vulnerability × Impact (includes treatment recommendations).
Price: €5,600
Framework Assessment: Objective recommendation: which framework(s) fit you best (NIS2, DORA, ISO 27001, BIO, EU AI Act, etc.) and exactly what to do next
Price: €1,800
Control Analysis: Detailed evaluation of your existing safeguards and countermeasures
Price: €2,800
Gap Analysis: Precise map of the distance between your current state and the target (regulatory or certification).
Price: €4,200
Consolidation Assessment: Practical plan to streamline and align tools, policies, data and processes (often the final step before implementation).
Price: €5,600
AI Risk Analysis & Ethics Assessment: Focused evaluation of AI systems’ impact on your security posture, including ethics, governance and EU AI Act conformity requirements
Price: €6,400
-
Security is a leadership challenge, not just a technical one. We provide expert guidance without the overhead of a full-time executive.
Fractional / Virtual CISO (vCISO): Our CISO services provide your organization with executive-level security leadership without the commitment or cost of a full-time hire. Whether you are a startup needing a foundation or an enterprise facing a transition. Available ad-interim, per-consultation, or on-location.
Price: from €100 per hour (Dependant on consultant)
Comprehensive Policy Review: Full review of your existing policies + practical remediation plan and complete rewrite of each policy (strategy itself remains your responsibility).
Price per policy: €2,800
Strategy Development: Complete information security strategy: strategic policy, tactical policy and a 1-year roadmap with mid year review. Includes scoping interview, design workshops and final board-ready version.
Price: €6,900
-
These three services are designed to be used independently or combined into a seamless programme. Many clients start with Regulatory Alignment to map obligations and gaps, then add Security Assurance for independent verification, and finish with Accreditation Support when they need formal certification or authorisation.
Regulatory Alignment: This service translates complex regulations into clear, actionable obligations tailored to your organisation, size, sector and supply-chain role. It identifies what you already have in place and delivers a practical, prioritised roadmap to close any gaps.
Standard pricing (per regulation):
Full four-phase engagement (obligation mapping, current-state assessment, gap closure roadmap, evidence preparation): €8,400
Phases 1–2 only (mapping + current state): €6,600
Annual monitoring retainer (post-alignment updates and guidance): €3,600 / year
Best for: Organisations preparing for NIS2, DORA, CER, BIO2, GDPR security obligations or using ISO 27001 as a framework.
Security Assurance: This evidence-based review confirms that your existing controls are not only documented but actually operating as intended and appropriately sized for your real risks. It is ideal before board presentations, major contracts, investor discussions or as annual governance hygiene.
Standard pricing:
Full engagement: €6,900
Standalone assurance report (for clients with existing documentation): €3,000
The resulting report is board-ready and includes clear ratings (assured / partially assured / not assured) plus practical recommendations.
Accreditation Support: This is our most comprehensive service. It guides you through building or strengthening an Information Security Management System (ISMS) and prepares you for external audit or accreditation. Workstreams are modular so you can focus investment where you need it most.
Standard pricing:
Full ISO 27001 (or comparable) engagement (all phases and workstreams): €21,000
Phases 3 & 4 only (pre-audit readiness + audit support): €6,000
Individual Phase 2 workstreams: from €1,200 each
Important note: Successful certification or accreditation requires active participation from your own team. We provide expert guidance, templates, reviews and audit support, but we cannot guarantee the final decision. That rests with the independent certifying or accrediting body.
Mission Critical Add-ons for Classified Environments (NATO / EUCI )
For organisations handling classified information (NATO or EUCI), all three AAA services are available with a specialised add-on. This includes deeper on-site work, authority-specific documentation, and alignment with NSA / accrediting authority expectations.
Typical pricing for the classified add-on:
Full Regulatory Alignment: €15,300
Full Accreditation Support: €32,400
The significant uplift reflects the additional complexity, stricter documentation standards, physical/personnel security requirements and external dependencies, not arbitrary premium pricing.
-
In today’s regulatory and threat landscape (NIS2, DORA, ISO 27001, BIO and beyond), having policies and strategies is no longer enough. You need secure, battle-tested operational processes embedded into the DNA of your organisation. Processes that deliver stability, rapid recovery and defensible resilience when it matters most.
Core Resilience Pillars
We work with you on the following foundational areas:
Business Continuity Management (BCM): We design strategies to ensure maximum uptime and operational stability, allowing your critical functions to persist even during significant external disruptions or disasters.
Incident Management: Design and implementation of secure response protocols. We help you detect, contain, and remediate threats quickly to minimize impact and restore normal operations.
Change Management: Managing system updates and organizational shifts through structured vetting processes to prevent security regressions and ensure operational stability during periods of transition.
Risk Management: Proactively identifying, assessing, and mitigating potential threats to your operations, ensuring informed decision-making and the preservation of long-term business value.
Integrated Operational Processes
We also strengthen the supporting processes that keep your operations secure and compliant:
Identity & Access (IAM) - Configuration Management - Asset Management - Workforce & Talent - Facility (Physical) - Information Management - and more.
Process Design, Implementation & Evaluation
Turning plans into operational reality
Many organisations tell us the hardest part is not designing the processes, it is actually implementing, embedding and evaluating them so they work under real pressure.
We offer a dedicated Process Design, Implementation & Evaluation service to bridge this gap:
What you get: Collaborative design of tailored processes, hands-on implementation support with your team, testing/exercising (including tabletop simulations), post-implementation evaluation and refinement.
Price: €11,200 per process
-
This consulting service is premium, fixed-fee, and focused on custom design, launch, measurement and cultural embedding. Exactly what organisations need to achieve real compliance and risk reduction.
Security Awareness Workshops: Interactive, role-tailored sessions for staff and leadership (in-person or virtual).
Price: €2100
Phishing & Breach Simulations: Realistic campaigns (email, SMS, vishing) + detailed reporting and debrief.
Price: €2800
Continual Learning Programs: Year-long structured curriculum, micro-learning, progress tracking and refreshers.
Initial Price: €2,100
Annual Support: €3,600
AI Usage Policy & Training: Custom AI targeted training on safe & compliant AI use.
Price: €2,100
All prices include preparation, delivery, materials and a board-ready report. Group sizes up to 50 participants are included; larger groups or multiple sessions are priced per additional cohort.
Most clients achieve faster behaviour change and better compliance by combining services into a single programme. Contact us for bundled discounts.
Important note: Real culture change requires active participation from your leadership and internal team. We provide expert design, delivery, facilitation and measurement — but sustained behaviour change happens inside your organisation.
Pricing & Commercial Terms
All services on this page are offered as fixed-fee engagements based on clearly defined scopes and time investments. This provides you with cost certainty and eliminates surprise hourly billing.
Prices shown are exclusive of VAT (BTW). The standard Dutch VAT rate of 21% applies.
Prices are subject to change without prior notice. All proposals are valid for 30 days from the date of issue.
Fixed fees assume standard scope and reasonable client participation (e.g., timely provision of information, attendance at workshops, and internal ownership of implementation). Significant scope expansions, additional participants, extensive travel/on-site days (especially for classified environments), or changes in project complexity will be quoted separately.
All engagements are governed by our standard Terms & Conditions which are available upon request. These cover project scope, deliverables, payment terms, confidentiality, intellectual property, and liability limitations.
While we provide expert guidance, templates, facilitation, and evaluation, successful results particularly in implementation, process embedding, awareness culture change, and accreditation depend on active participation and ownership by your own team. We cannot guarantee specific regulatory outcomes (such as successful certification or accreditation), as final decisions rest with independent auditors or authorities. For NATO/EU Classified environments, additional on-site requirements and travel are charged at cost or via a separate day rate where applicable.
We pride ourselves on transparency. After a short scoping discussion we will always provide one clear, fixed-fee proposal tailored to your exact situation, usually within 72 hours.