ISO 27001 certification for a health services provider
- Sector
- Health and prevention services
- Size
- 600 employees
- Engagement
- ISO/IEC 27001 project management, scope covering the data centre and IT infrastructure
- Outcome
- ISO/IEC 27001 certification obtained in 2026
The organisation wanted a certification its customers would recognise, without building a paper system nobody uses. DigiSôter ran the project end to end on a focused scope: the data centre and the IT infrastructure behind its services. Risk assessment, Statement of Applicability, policies and audit preparation were handled with the internal team, step by step.
NIS 2 programme for a multi-site beverage manufacturer
- Sector
- Food and beverage manufacturing, NIS 2 Important entity
- Size
- 800 employees, several European countries
- Engagement
- NIS 2 programme management
- Outcome
- Critical systems identified, security budget and governance defined, group policies rolled out
NIS 2 landed on a group with several production sites, each with its own habits. We started by agreeing which systems really matter, using an impact classification plant managers could follow. From there we built a costed security budget aligned with CyberFundamentals, set up the steering committee and governance roles, and wrote group security policies local teams can apply.
Group CISO for an international industrial group
- Sector
- Industrial group, NIS 2 Important entity
- Size
- 8,000+ employees, operations on several continents
- Engagement
- Group CISO, delivered as CISO-as-a-Service
- Outcome
- One control framework, renewed policy set, data classification, cybersecurity strategy and device hardening launched
A diversified group needed one person accountable for cybersecurity across very different business lines. DigiSôter holds the Group CISO role as a service. We merged ISO 27001, CyberFundamentals and CMMC into a single control framework, rebuilt the policy set and published clear rules on AI use. A five-level data classification and USB restrictions followed. Executive crisis exercises test the whole chain in practice.
Executive crisis exercises for two industrial groups
- Sector
- Heavy industry and defence
- Size
- 3,000 to 10,000 employees each, international
- Engagement
- Seven executive tabletop exercises
- Outcome
- Recurring exercise programme at both groups
A crisis plan only proves itself when the executive committee has to decide under pressure. For two international groups, we designed tailored scenarios, ran a facilitation cell playing every outside party and logged each decision. The debrief focused on who decides what, and how fast. Both came back: three exercises for one, two for the other.
Year-round security awareness programme
- Sector
- Health and prevention services
- Size
- 600 employees
- Engagement
- Annual awareness programme management
- Outcome
- Yearly calendar planned, campaigns run, results reported to management
Awareness works when it runs all year, not as a single session before an audit. DigiSôter plans the yearly calendar, picks topics linked to the risks in the certified ISMS, runs the campaigns and reports results to management. Staff get short, regular touchpoints instead of one long lecture.
