For boards and executive teams in regulated industries
Cyber risk and compliance, handled at the level where you are accountable.
We give your company senior security and privacy leadership, without a permanent hire: a clear view of your exposure, a plan the board can approve, and someone who carries it through.
On the board agenda
Three questions executives are asked more and more often
“Are we compliant with NIS2, and can we prove it?”
Under NIS2, management approves the security measures and answers for them. You need a defensible position, not a binder of policies nobody reads.
“Will we pass our customers’ audits?”
Pharma and life sciences customers send security questionnaires and audit their suppliers. A weak answer costs contracts; a strong one wins them.
“What happens when something goes wrong?”
A ransomware incident or a data breach stops production and reaches the regulator within days. The plan, and the people, must be ready before.
Services
How we support your leadership team
Fractional CISO
A senior security leader on your management team for a set number of days per month. Owns the risk register and the roadmap, reports to the board, and is the contact for auditors, customers and authorities.
External Data Protection Officer
The legally required DPO role under GDPR, filled by an experienced practitioner. Independent advice, DPIAs, breach handling and the dialogue with the data protection authority.
NIS2 and ISO 27001 programmes
From gap assessment to certification readiness, run as a programme with a budget, milestones and steering committee reporting. We bring in specialists from our network where the work needs them.
AI governance
A clear position on the EU AI Act and on how your teams use AI: what is allowed, what it costs, and what you must document.
Independent review
A second opinion before a decision: a critical vendor, an acquisition target, your IT/OT security or your incident readiness. A short written report with priorities.
Approach
Clear from the first meeting
A confidential first conversation
We listen to where you stand, what is at stake and what the board expects. No cost, no obligation.
An assessment you can act on
Your exposure on one page, with priorities, options and the cost of each. Written for decision makers.
Delivery and reporting
We carry out the plan with your teams and report progress in the format your board uses.
About us
Senior experience, a trusted network
De IT Consultant is led by Thomas Baetens, cyber security architect, Data Protection Officer and former CISO. He has led ISO 27001 and GDPR programmes for international laboratory groups and today runs security and IT programmes across sites in four countries.
Every engagement has him as the lead. When the work needs more capacity or a specific skill, we add independent specialists we know and trust, under one contract.
ISO/IEC 27001 Implementer · Data Protection Officer · Internal Auditor · Project Management, Vlerick Business School
Independent specialist in security, privacy or OT? We are glad to hear from you.
A confidential conversation
Tell us briefly what is on your mind. We reply within two working days and treat everything you share as confidential.