GDPR document pack
Privacy statement, cookie statement, processing register and a data processing agreement template.
Services
All services
Core services have a fixed price and a fixed delivery time. Engagements and advisory are Bram's own work.
Standard services
Fixed price, scheduled
Standard compliance work, done the same way every time by vetted specialists with a fixed method. Pick a start date, pay online, receive it in your portal.
Privacy
DPIA for one processing activity
A data protection impact assessment for one processing activity, from a two-hour session to a signed-off report.
Data processing agreement review
One data processing agreement checked against Article 28 GDPR, with the points to raise.
Security
Security questionnaire answered
A customer's security questionnaire answered from your own practices and evidence.
Information security policy pack
Eight information security policies written for your organisation, aligned to ISO 27001.
Information security risk assessment
A three-hour risk session with your team, a risk register and a treatment plan.
Incident response plan and exercise
An incident response plan for your organisation and a tabletop exercise to test it.
Security awareness session
A 90-minute online awareness session for up to 25 staff, with an attendance record.
Audit
ISO 27001 internal audit
An independent ISO 27001 internal audit on a date you book, with a report 5 working days later.
ISO 42001 internal audit
An independent ISO 42001 internal audit on a date you book, with a report 5 working days later.
Management review, prepared and minuted
Your yearly management review prepared, chaired and minuted as the standard requires.
Regulation
NIS2 and Cyberbeveiligingswet scan
Whether NIS2 and the Cyberbeveiligingswet apply to you, and the gaps against the required measures.
EU AI Act classification
Up to three AI systems classified under the EU AI Act, with your role and the obligations that follow.
DORA gap scan
A gap scan against DORA for financial entities and their ICT suppliers.
Surveillance retainer, after certification
A monthly retainer keeps your certified management system current: reviews, updates, the internal audit and the management review.
BasisEUR 250per month
PlusEUR 450per month
PremiumEUR 650per month
Work with Bram
Bram on your project
For a certification project, Bram leads the work himself: he builds the management system with your team, from scope to the handover to your certification body.
ISO 42001
AI system register, AI policy, risk and impact assessments, Annex A controls, evidence and audit preparation.
From EUR 6,000Deliverables and priceISO 27001
Information security management system, risk assessment, Statement of Applicability, control design and audit preparation.
From EUR 6,000Deliverables and priceISO 27001 and ISO 42001
One management system that covers both standards, built once and audited together.
Quoted on requestDeliverables and priceSOC 2 and ISAE 3402
Readiness for the assurance reports your customers ask for: scope, control design, evidence and auditor preparation.
EUR 1,100 per dayDeliverables and price