NIS2, DORA, UK GDPR, ISO 27001 and Cyber Essentials Plus. Threat-aware compliance, not tick-box.
Provided by Christian T., Fractional CISO | Strategic Cyber, Technology & AI Advisor | Founder, Alvearium Associates — Fractional CISO & cyber risk advisor
Regulation now extends well beyond data protection: operational resilience, supply chain risk, board accountability and security by design. I translate those requirements into clear, proportionate controls, so you can evidence reasonable, defensible steps rather than just claim compliance.
What's included: - Readiness and gap assessments against NIS2, DORA, UK GDPR, ISO 27001, SOC 2, Cyber Essentials Plus, NIST CSF and NCSC CAF - Practical remediation plans with owners and priorities, not shelfware - Policy reviews and regulatory-ready documentation - Board and senior management briefings on accountability and oversight obligations - Preparation for regulatory engagement and scrutiny, working alongside your legal advisers Typical questions I help answer: Are we exposed if something goes wrong?
What will we have to show a regulator or the board? Do these rules even apply to us? Have we done enough to be seen as reasonable? Why me: over 20 years of security leadership in regulated sectors, former Group CISO of a global law firm, CISSP and CISM.
I have prepared organisations for regulator scrutiny and helped boards evidence oversight across financial services, legal and professional services.
Advisory support scoped to your regulatory landscape: readiness and gap assessments, remediation planning, policy reviews, regulatory-ready documentation and board briefings. Typical engagements run from a focused two-day review to ongoing monthly support alongside your legal advisers.
Heelr is the cybersecurity services marketplace by Cyberr. Buyers scope work, compare verified providers and pay through protected payments.