Warning The vulnerabilities PHP2Shell and HTTP2Shell are being heavily exploited right now. Many websites and servers are affected. Please check here first whether you are affected. Am I affected?
VETOSEC_Compliance: NIS2, GDPR & ISO 27001 | vetosec vetosec.at/en/compliance/
Compliance
Clarity on your compliance
NIS2, GDPR, ISO 27001 or DORA. We check where you are compliant, where the gaps are and what is next. In writing, in plain language.
No meaningful compliance step without knowing where you stand. The IT Check records the
current state of your IT and delivers findings with a prioritised action plan.
The first step is an IT Check, in which we review your IT for weaknesses. Protective measures follow: endpoint protection (EDR), sound backup strategies and staff awareness. Where needed we support you with NIS2, GDPR and ISO 27001 compliance.
Am I affected by NIS2?
NIS2 applies to companies in critical sectors (energy, health, transport, digital infrastructure, finance) from 50 employees, or with more than 10 million euro in turnover and more than 10 million euro in balance sheet total. Smaller companies can be in scope as well if they provide critical services. Tell us your situation and we will place it for you.
What is the difference between GDPR and NIS2?
The GDPR protects personal data. Its territorial scope depends in particular on establishment, offering goods or services to people in the EU, or monitoring their behaviour. NIS2 focuses on the security of network and information systems and applies to critical sectors. Both require technical and organisational security measures.
Do I need an ISO 27001 certification?
ISO 27001 is voluntary, though customers and partners often ask for it. Certification is carried out by accredited auditors. We support you in preparing for the audit: building the ISMS, documentation, risk assessment and implementing measures.
What happens during a cyber attack?
During an attack, acting fast matters: isolate systems, preserve evidence, limit the damage. Our SOC service delivers structured logs as the basis for forensic analysis. Managed EDR can automatically contain detected threats. We also support you with reporting obligations under NIS2 and the GDPR.
The following external website is beyond our control. We accept no liability for its content, privacy practices or security. You use it at your own risk.
Safe travels! The new tab is opening.
Your contact
Dipl.-Ing. Samuel Ziegler, BSc
Available, Mon to Fri 9am to 5pmCurrently outside office hours
