Regulatory Frameworks

Security Management Systems

We implement and audit information security management systems and cybersecurity frameworks in accordance with ISO and NIST standards. We provide support throughout the entire certification process with accredited bodies.

+200
managed ISO certifications
+100
implementation projects
5
covered regulatory frameworks
100%
certified lead auditors
Our services

Security Management Systems

BSI and SGS certified lead auditors with active experience in implementation and certification projects.

Certifiable AIMS

ISO 42001 — Artificial Intelligence Management

Implementation of an Artificial Intelligence Management System (AIMS) in accordance with ISO/IEC 42001, to develop, deploy, and use AI systems in an ethical, secure, transparent, and compliant manner with current legislation.

ISO 42001AIMSAI GovernanceCertificationAI Risks
Gap analysis and establishment of the FSMS
Documentation and compliance support
Internal audit and certification preparation
More information
Certifiable ISMS

ISO 27001 — Information Security

Implementation of an ISMS (Information Security Management System) according to ISO/IEC 27001, from the ISO/IEC 27002 gap analysis to the implementation of the system, with management involvement and a proper design of the ISMS.

ISO 27001ISMSGap analysisISO 27002
ISO/IEC 27002 gap analysis as a first step
Design and implementation of the ISMS
More information
Requirement 9.2

ISO 27001 Internal Audit

Independent first-party audit of all areas of the organization to comply with requirement 9.2 of the ISO/IEC 27001:2022 standard through a review of the ISMS implementation status.

ISO 27001:2022Internal auditRequirement 9.2ISMS
Planning, document review, and audit plan
Audit execution with opening meeting
Report with evaluated controls and findings
More information
Cybersecurity Guide

ISO 27032 — Cybersecurity Framework

Consulting to implement a cybersecurity framework based on ISO/IEC 27032, with a risk management approach in four areas and the phases of organizational understanding, risk analysis, action plan, and implementation.

ISO 27032CyberspaceRisk managementAction plan
Understanding the organization and risk analysis
Action plan with prioritization of measures
Plan implementation
More information
Voluntary Framework

NIST CSF 2.0

Consulting and implementation of NIST CSF 2.0, applicable to organizations of any size and sector: initial diagnosis, risk assessment, current profile versus target profile, action plan, implementation, and continuous improvement.

NIST CSF 2.0Risk AssessmentCurrent and Target ProfileContinuous Improvement
Initial diagnosis and maturity level
Current profile versus target profile
Governance, monitoring, and continuous improvement
More information
What our clients say

Trust that backs results

Contact

Let's talk about your certification project

Tell us about your situation and our team will guide you on the most efficient path to certification.

R
Ricardo Andrés Cárdenas
2 months ago

Your guidance in the migration to ISO/IEC 27001:2022 has been fundamental to strengthening our ISMS.

A
Andrés Mejía
3 months ago

Your team combines solid technical expertise with a great willingness to work collaboratively.

Request information

We will contact you as soon as possible.
Global Presence

Our offices

Barcelona

C. Santander, 101. Building A-2
E-08030 Barcelona (Spain)

+34 93 305 13 18
Madrid

Arequipa St., 1
28043 Madrid (Spain)

+34 91 763 40 47
Bogotá

Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)

+57 601 638 68 88
+200
managed ISO certifications
Contact us