Security questionnaire answered
A customer's security questionnaire answered from your own practices and evidence.
ISO 27001, ISO 42001, SOC 2, GDPR, NIS2
Rent a compliance lead.
Keep the deals.
Your biggest customers ask for ISO 27001, SOC 2 and proof that your AI is governed. You can hire a head of compliance. Or you can rent one who has done it as a COO, from two days a month.
- I led an ISO 27001 certification as COO, full Statement of Applicability
- I wrote and led a company AI policy, aligned to the EU AI Act
- Twenty years of operations in more than 25 countries
The plain truth
Nobody buys a certificate. They buy the deal it unlocks.
A 200-question security questionnaire lands on a Tuesday. The procurement team behind it does not care how good your engineers are. They need a document to file. Until they have it, the contract waits.
Most companies buy a compliance platform. The dashboard shows 140 red controls. A dashboard is a to-do list. Someone still has to write the risk assessment, run the review and sit the internal audit.
That someone is me.
Two ways to work with me
I run it, or a specialist delivers it at a fixed price
Work with me
The fractional compliance lead
I am your compliance officer for two, four or eight days a month. I own your platform, run the risk cycle, answer your customers' questionnaires and prepare every audit.
From EUR 250 a monthSee the three plans Work with meA readiness engagement
Three to six months to a certification audit for ISO 27001 or ISO 42001. Seven deliverables. One fixed price by pace. Most clients keep me on afterwards.
From EUR 6,000See the paces Standard servicesFourteen fixed-price products
A questionnaire answered in five days. A DPIA. A yearly internal audit. A vetted specialist does it from a fixed method. I review it. It lands in your portal.
From EUR 195See all fourteenStart here
The two things most companies need first
One stops a deal from stalling. The other every certified company must buy every year.
ISO 27001 internal audit
An independent ISO 27001 internal audit on a date you book, with a report 5 working days later.
Already on Vanta or Drata?
Good. Now someone has to do the controls.
I work inside the platform you already pay for. I own the instance, close the red controls in order of risk and turn the evidence requests into a routine your team can keep. You keep the subscription. You stop needing a second person to run it.
Rent the person who runs it- 01
Tell me what the customer asked for
The free check or a ten-minute call. I tell you what is required and what is not.
- 02
Get a fixed scope and a date
A plan, a pace or a product. The price is published. The date is in writing.
- 03
The work is done and reviewed
By me, or by a vetted specialist from a fixed method. Nothing reaches you unreviewed.
- 04
You pass, and you stay passed
The certification body audits you. Then the yearly audit, the internal audit and the questionnaires keep coming. So do I.
Why an operator, not an auditor
I have sat on your side of the table
I know what to skip
Most consultants come from audit and want everything done. I ran a software company's operations and certified it with the budget I had. I will tell you which controls matter to your customers and which are theatre.
I have done the AI part
ISO 42001 is two years old. Few advisers have led an AI policy inside a company and aligned it to the EU AI Act. I have.
I speak procurement
Twenty years of enterprise operations in more than 25 countries. When your customer's security team joins the call, I have sat on their side too.
Free readiness check
Ten minutes. A score per clause. No email needed to see it.
Pick a standard. Answer the questions. Read your gap report. The score is worked out in your browser and never leaves it.
Questions
What people ask before they start
Do you certify us?
No. Nobody who advised you may. An accredited certification body audits you and issues the certificate. I prepare you and I am in the room when they come.
What does the certification body cost?
Typically EUR 6.000 to 12.000 for the audit, paid by you to them. Never part of my price.
How is a retainer billed?
Monthly in advance. One month's notice. No minimum term. Most clients start at two days a month before an audit and move to four when the questionnaires pick up.
Is this legal advice?
No. I am a compliance specialist, not a lawyer. Five standard services sit next to legal questions and each page says so. For a legal opinion I refer you to a privacy lawyer I work with.
Can we start small?
Yes. A security questionnaire answered costs EUR 495 and takes five working days. Most retainers started that way.
Talk to me
Tell me what your customer asked for.
Ten minutes. You leave knowing what is required, what it costs and when it is done.
Talk to meOr take the free readiness check first.