Five stations from the trigger to a passed audit, each with a clear result. Without an in-house CISO, a vCISO takes the journey with you and works with OdySecure to do it. With your own CISO, you take it with a platform licence.
Book an intro callNo obligation. If NIS-2 is your question and you would rather check it yourself first, the 5-minute maturity check is in station 1.
Every journey starts with a trigger: a regulatory requirement such as NIS-2 or DORA, an upcoming ISO 27001 certification, a vacant CISO role, or an acquisition after which the new business has to meet your requirements. In the intro call we work out what follows from it for you. If it is only about NIS-2 and you would like to check for yourself first, start with the 5-minute maturity check.
What you have afterwards: An assessment of your trigger and the path that fits it.
The classification becomes a picture: a platform-based assessment measures your security posture against the standard that fits you. ISO 27001, IEC 62443, BSI IT-Grundschutz, NIS-2 or your own catalogues, imported via OSCAL or created directly in the platform, across multiple sites, with automatic scoring.
What you have afterwards: A maturity report with a prioritised list of measures.
This is the most important decision on the way. There are three answers, and which one fits depends on whether you have a CISO of your own.
A senior CISO takes on the security function permanently, from €3,600 per month. OdySecure is included in the mandate, and the evidence is produced there.
Your team stays in charge and works with OdySecure under a module licence. With an implementation project if you want one.
A senior CISO bridges a vacant role, audit pressure or the period after an incident. €8,000 to €15,000 per month, project-based.
What you have afterwards: Ownership assigned and an onboarding plan.
Day to day, the five modules ISMS, BCM, assessment, third-party risk management and awareness run on one data layer. The platform itself answers the question executives and auditors ask most often. The OdySecure Navigator answers "Where do we stand?" with source and metric, strictly within read permissions.
What you have afterwards: Able to answer to management, audit and clients, at any time.
When the audit comes, it is no longer a scramble: evidence is produced in daily operations and available in an audit-proof way; on request we accompany the certification. And the journey continues: AI agents that take over recurring ISMS work under supervision are in a design-partner programme, not yet generally available.
What you have afterwards: A passed audit without a state of emergency.
Then the intro call is your way in. We clarify your trigger and who runs the security function for you. If none of our paths fits, we will say so.
Book an intro callMemberships, programmes and partnerships
