Frequently Asked Questions

We transform cyber risks from business inhibitor to a growth enabler.

CYRIS360

Switch to {language}?

At Cyris360, we have developed the Cyber Risk Framework (CRF), a modular framework designed to support businesses in addressing their cybersecurity challenges, in 3 steps:

This pillar focuses on understanding your organization's unique context, by performing a gap assessment, followed by a roadmap with one or muliple work product(s) to reach the desired outcome.

Governance

This pillar is about delivering the work product(s) and creating measurable improvements that build a more secure and resilient IT environment and increased staff awareness.

Implementation

This pillar focuses on maintaining cybersecurity resilience in day-to-day activities. This ensures the long-term sustainability of your cybersecurity efforts, as your business evolves.

Operations

Our methodology

We provide tailored Governance, Risk & Compliance (GRC) solutions for financial institutions, helping them navigate the evolving regulatory landscape and build operational and cyber resilience. Our services support the implementation of internationally recognized standards such as ISO/IEC 27001 for information security and ISO 22301 for business continuity, alongside compliance with the Digital Operational Resilience Act (DORA) and and Markets in Crypto Assets Regulation (MiCA). We assist with ICT risk assessments, third-party risk management, incident response readiness, and regulatory reporting obligations required under DORA, and MiCA. By aligning compliance efforts with your strategic objectives, we help financial organizations protect critical services, maintain client' trust, and meet the expectations of regulators and stakeholders alike.

GRC for Financial organizations

We offer specialized Governance, Risk & Compliance (GRC) services for healthcare providers, designed to address the unique regulatory, privacy, and security challenges of the sector. Our expertise includes the implementation of international ISO/IEC 27799 standard, which provides guidance on managing health information security in line with ISO/IEC 27002. Furthermore, we also provide support for implmenting local healthcare regulations according to NEN 7510 in the Netherlands, and Hébergeurs de Données de Santé (HDS) in France. We help healthcare organizations build and certify robust Information Security Management Systems (ISMS), conduct risk and impact assessments, and meet national and international data protection requirements. Our goal is to ensure the confidentiality, integrity, and availability of patient data while supporting compliance with healthcare regulations and improving operational resilience.

GRC for Healthcare organizations

A vCISO, or Virtual Chief Information Security Officer, is an outsourced cybersecurity expert or team that provides a bundle of information security management services to help client organizations develop and implement security policies, manage risks, and ensure compliance with industry regulations. vCISOs can be a cost-effective solution for organizations that want to benefit from experienced cybersecurity professionals without the overhead of a full-time/Dedicated CISO. vCISO service can be tailored to support a specific project, such as: - Data Loss Prevention (DLP) - Third-Party Risk Management (TPRM) - Incident/Crisis Management

Virtual Chief Information Security Officer

We offer specialized training programs designed to build practical skills and strategic understanding across key areas of information security, compliance, and secure development: - ISO/IEC 27001 Lead Implementer - 4 Days (Certificate by PECB) - NIS 2 Foundation - 2 Days (Certificate by PECB) - NIS 2 for decision makers - 2 Hours (Tailored) - Threat Modeling / Secure SDLC for Senior developers - 1 Day

Information Security Training

GRC - ISO/IEC 27001 - NIS2 & DORA

Organizational Security

We provide end-to-end Governance, Risk & Compliance (GRC) services to help organizations strengthen their security posture, ensure business resilience, and meet growing regulatory demands. Our core offerings include the implementation of ISO/IEC 27001-compliant Information Security Management Systems (ISMS), ISO 22301-compliant Business Continuity Management Systems (BCMS), ISAE 3402 (SOC 2) readiness assessments. From gap assessments and risk analysis to policy development, and audit preparation, we deliver tailored support for achieving compliance with information security regulations such as the NIS2 Directive

Why Organizational Security Matters?

Securing the Internet of Things (IoT) and industrial automation systems is essential as these technologies become integral to critical infrastructure and manufacturing processes. The ETSI EN 303 645, EN 18031, EN 17927 and ISO/IEC 27402 standards focus on the security requirements of IoT devices, providing a foundation for assessing vulnerabilities and ensuring compliance with recognized protection profiles. Complementing this, the ISA/IEC 62443 framework offers a comprehensive approach to industrial cybersecurity, addressing system architecture, risk assessment, and security lifecycle management. These frameworks highlight the need for layered defense strategies, secure device provisioning, and continuous monitoring to mitigate threats such as malware propagation, unauthorized control access, and data exfiltration.

Internet of Things (IoT) - RED-DA & CRA

As electric vehicle (EV) adoption accelerates, the cybersecurity of EV charging infrastructure becomes increasingly critical, particularly given the integration of communication protocols like ISO 15118 and OCPP 2.0.1. ISO 15118 enables secure, automated communication between EVs and charging stations, supporting features like Plug & Charge and encrypted identification, while OCPP 2.0.1 facilitates backend interoperability between charging stations and management systems. Both frameworks rely heavily on robust cryptographic mechanisms to ensure authentication, data integrity, and confidentiality.

EV Charging

Cybersecurity has been a hot topic over the past few years as hackers continue to find ways to exploit vulnerabilities within vehicles. As automakers begin to implement vehicle-to-everything (V2X) communication systems, they also face challenges with cybersecurity. The V2X technology allows cars to communicate with each other, as well as with surrounding environment and exchange information, without human intervention. This type of system could potentially save lives when used properly; however, there are risks involved.

Automotive

We support our client with code/design reviews, implmentation of security requirements, and security testing.

Product Security

Product security focuses on ensuring the safety of a product from its initial design and development phases through to its end-of-life (EOL). With the increasing reliance on connected devices such as vehicles, smartphones, IoT, and critical infrastructure systems, security becomes crucial. These devices often operate in non-trusted environments and, if compromised, can be used to launch attacks or facilitate coordinated cyber threats like DDoS attacks. To mitigate these risks, security must be integrated into every stage of product development and implementation, as well as continous monitoring and regular testing during the operational phase.

Why Product Security Matters?

We empower our clients to leverage the immense potential of Digital Transformation, while effectively managing the inherent risks that come with Digital Technologies. Thus, enabling you to accelerate your business-growth safely and efficiently.

Elevate your organization's information security with our Governance, Risk and Compliance (GRC) services. We offer time-boxed gap assessment, and implmentation of ISO/IEC27001 compliant Information Security Management System (ISMS), augmented with industry-specific framework (TISAX, NEN7510), as well as regulatory compliance (NIS2, DORA).

Our technical consulting services empowers our clients to design, implement, and release secure products. We support our clients with implementation of Cybersecurity Management System (CSMS) for Automotive, including Commercial trucks, as well as Cybersecurity requirements for Internet of Things (IoT) according to harmonized standards (EN18031).

Secure Software Development Lifecycle

Our services

Cyris360 was founded in 2023 with a focus in cybersecurity governance, risk management, and secure software development. To offer broader services and complementary capabilities, we've partnered with Saneon GmbH to expand our network in the Automotive sector. Furthermore, we're founding member of Bare-Alliance.eu — a collaborative network designed to bring together diverse skill sets and decades of accumulated experience.

Saber Ferjani

Paolo Carner

Ilyess Benaicha

Alexia Ronda

Kağan Gökbayrak

Our team

Hannes Wyss

Anton Fedorov

Anonymous

Herman Greeven

Craig Knox

At Cyris360, we help our clients with clarity and confidence. Here's what sets us apart:

We focus on what matters most. By streamlining processes and eliminating unnecessary complexity, we deliver results quickly and make the most of your budget and resources.

Efficient

We bring the best of both worlds: strong technical expertise and real-world, hands-on experience. This combination allows us to understand your challenges deeply and craft practical, high-impact solutions.

Proficient

CYRIS360 is trusted by global brands, including:

Our value proposition

With consistently high client satisfaction and long-standing partnerships, we've built a reputation for delivering on our promises and acting as a dependable advisor in every engagement.

Forms:

Partners:

Trust:

‎