Cybervize provides a CISO who implements and evidences the duties for which management is personally accountable under NIS-2. Your CISO answers the question "Where do we stand?" with source and metric and delivers the evidence you need for BSI, supervisory board, auditors and insurers. The OdySecure security platform is included in the mandate.
Book an intro callFour answers every management board should have ready for the supervisory board, the insurer and the auditor. Your CISO works them out with you, and the platform provides them as a report whenever you need it.
Your CISO maps the NIS-2 minimum measures from § 30 of the German BSI Act or, in the financial sector, the DORA requirements, together with ISO 27001 Annex A, to your organisation and keeps the status per control with documented evidence. The platform provides it as a PDF whenever you need it.
Your CISO assesses the risks with you and puts forward those that need a management decision. The risk register shows owner, treatment status and 12-month trend.
Your CISO plans the measures with budget, owner and due date, and the measure register records them. Before every supervisory board meeting you can say what you have committed for which risk reduction.
Your CISO supports re-audits, supplier requests and external audits. The audit trail with timestamp, owner and versioning turns them into an on-demand exercise rather than an Excel battle.
The direct route is an intro call about the vCISO mandate. If you first want to clarify whether NIS-2 applies to you, start with the free 30-minute risk check.
A senior CISO fills the CISO role permanently, with the platform included. For organisations without an in-house CISO.
Learn moreFree 30-minute initial call with an indicative NIS-2 classification, top-5 gaps and a path recommendation.
Learn moreGap assessment, roadmap, implementation via the platform. From 4,500 euros.
Learn moreISMS, compliance and evidence from a single platform. Multi-entity, multi-country, multilingual.
Learn moreSelf-check available
Free, no signup, around 5 minutes. Detailed evaluation by email if desired.
Four reasons that recur in board conversations. None of them is a tech statement.
Every mandate follows the same methodology, and it is built into the platform. You get it without the hourly rates and programme inertia of large consulting engagements.
One monthly price instead of open consulting hours: the vCISO mandate from 3,600 euros per month, with the platform included. Budgetable, with no surprise invoice at quarter-end.
KPI dashboards and PDF reports in the language of corporate leadership. Maturity heatmaps, top-10 risks, compliance status for NIS-2, ISO 27001 and DORA, 12-month trend.
Platform evidence is built for the audit situation: timestamp, owner and version on every entry.
OdySecure delivers evidence to boards and supervisory boards on demand, instead of it being filtered through IT language.
The IT service provider typically owns operations and technology. NIS-2, however, obliges management to handle governance, risk assessment, supplier management and documented reporting paths. These duties cannot be delegated away. Your vCISO prepares that governance for you and documents it in the platform, without you having to become CISO yourself.
That is the core question of the free 30-minute risk check. We assess sector (Annexes 1 and 2 of the German BSI Act), headcount, revenue and balance sheet total and classify you indicatively. The legally binding evaluation, however, remains a matter for a law firm with an IT-security-law focus. We provide the expert basis for that legal conversation.
Maturity heatmap by site and standard, top-10 risks with mitigation status, measure tracking by owner and due date, compliance status for NIS-2, DORA, ISO 27001 and sector-specific requirements, 12-month trend charts. Format: PDF templates for supervisory-board meetings and interactive dashboard for ongoing oversight.
Under a vCISO mandate, a senior CISO works for you from week one. With the 30-minute risk check you have an initial gap assessment immediately. You are typically audit-ready for NIS-2 in 8 to 12 weeks, depending on size and number of sites.
The vCISO mandate starts at 3,600 euros per month, platform included, with a six-month minimum term. The risk check is free. The NIS-2 gap assessment runs at 4,500 euros fixed price, implementation from 18,000 euros. Corporate pricing for multi-site rollouts is project-based.
We discuss your starting point, the requirements you have to meet and the right tier. Ideally with you and your IT lead present.
Book an intro callMemberships, programmes and partnerships
Many companies cannot answer where their critical data lives. What this means for NIS-2 compliance and how one structured workshop day creates clarity.
Many companies start their NIS-2 journey by searching for the right tool. But the foundation is often missing: a clear operating model with defined responsibilities and processes. Why getting the sequence right matters.
Many organizations push the information security policy to the back of the queue. Yet it is the operational anchor point for ISMS development and NIS-2 implementation and can be developed in just a few weeks.
Experienced C-level security leadership, 2 to 6 days a month, with the platform as the working tool.
Learn moreImmediate security expertise for transition phases and critical projects.
Learn moreAnalysis of your IT security posture with an actionable roadmap.
Learn more