01
An executive summary with a maturity score
An overall compliance index and maturity level, with the main strengths and gaps and the priorities for the first 90 days.
←Our Work · Security work
02Gap and Compliance Assessment
Know exactly where you stand with NCA.
A structured assessment of your compliance with the NCA Essential Cybersecurity Controls (ECC), cloud controls and the Personal Data Protection Law, with a maturity score and a phased roadmap.
National controls
A detailed review of every control
Maturity
A maturity level for each domain
Data protection
Personal data protection requirements
Three phases
A three-phase roadmap
What you get
A report your team can act on
02
A domain-by-domain analysis
We assess each domain for its strengths, gaps and the immediate action required.
- Governance, identity and access
- Network, endpoints and monitoring
- Data protection and backup
- Incident response and third parties
03
A remediation roadmap
Ranked recommendations and a phased plan: quick wins in 30 days, core hardening in 3 to 6 months, and sustained maturity in 6 to 12 months.
How it works
From first call to closed findings
01
Scoping and authorization
A free consultation to define scope, then a signed authorization.
02
Execution
Work runs to an agreed timeline, with immediate alerts for any critical finding.
03
Report and walkthrough
The report is delivered and walked through with your technical and management teams.
04
Follow-up and verification
After remediation, we verify the fixes and formally close the engagement.
Get started
Ready to see your own report?
Gap and Compliance Assessment
Request this service
Tell us about your systems and receive a clear scope, timeline and fixed quote.
- Free scoping session
- Signed authorization before any work
- Executive and technical report
- Walkthrough with your team
Not sure yet?
Start with a free consultation
We will help you choose the right service for your stage, your systems and your compliance needs.
- Penetration testing
- Gap and compliance assessment
- Cyber threat intelligence
- Purple teaming