Expertise

Larus works at the intersection of information security, governance, compliance and operational management.

Information security management

Design, implementation and improvement of information security management systems, including governance, risk management, policies, controls, measurement, internal audit and management review.

ISO/IEC 27001

Support for organisations preparing for certification or improving an existing ISMS, from initial scope and risk management through control implementation, audit preparation and certification.

NIS2 and cybersecurity regulation

Practical implementation of NIS2 requirements and related national cybersecurity frameworks, with emphasis on integrating regulatory obligations into existing governance and operational processes.

eIDAS and trust services

Security and governance support for organisations operating in the electronic trust services environment, including preparation and maintenance of requirements applicable to qualified trust service providers.

Security governance and CISO support

Interim or external CISO support, security governance, management reporting, risk management, supplier security, incident governance and coordination between management, IT, HR, quality and other organisational functions.

Technology and operational security

Review and improvement of practical security arrangements including identity and access management, vulnerability management, logging and monitoring, network security, backup and recovery, supplier management and security operations.