successful ISO implementations
Your Security Ally
Clarity in risk. Control in security.
Norvault Security helps growing SMEs organize security professionally without building a full internal security function.
When audit pressure, recurring customer questions or unfinished security work start to build up, we connect ownership, priorities and practical execution.
Expertise
Working method
From security question to operational control.
No reports for the sake of reports. Norvault quickly clarifies what is happening, what matters first and which output helps.
01
Clarify the question
We translate client pressure, audit needs or internal risk into concrete scope and first decisions.
02
Choose priorities
Risk, compliance and technical signals are brought together into a workable sequence.
03
Deliver usable output
You get actions, evidence, reporting or a roadmap that teams can use immediately.
Clients and collaborations
Trusted in practice.
This selection combines organizations Norvault works for and organizations Norvault works with.
Service overview
Our services in one clear overview.
From vCISO direction and ISMS management to compliance, audits, assessments, penetration testing and awareness.
vCISO servicesSenior security management without a full-time CISOISONIS2AIAuditRiskTestPeople
ISO 27001 implementation
From scattered measures to demonstrable certification.
NIS2 and the Dutch Cybersecurity Act
Translate duty of care and chain risk into action.
AI governance & ISO 42001
AI governance that remains demonstrably controlled.
Audits
Preparation and checks that make evidence clear.
Risk assessments
Clear risks with owner, impact and follow-up.
Penetration testing
Technical assurance on what is actually vulnerable.
Security awareness
Training that reaches behavior and decisions.
Subscriptions
Security management that grows with your organization.
Launch, Elevate and Ascend create a clear growth path for ongoing ISMS management, vCISO direction and security leadership.
Launch
from €695 per monthYou execute, Norvault keeps rhythm and overview.
For organizations with an internal owner who carries out most operational security actions.
- Monitoring the annual ISMS planning
- Monthly ISMS meeting and concrete action list
Most chosen
Elevate
from €1,250 per monthNorvault performs more work and coordinates follow-up.
For organizations that need active ISMS management and structural coordination with internal teams.
- Active management of the ISMS annual calendar
- Management and follow-up of risks and improvement actions
Ascend
from €1,995 per monthNorvault leads security as an external CISO.
For organizations that need ongoing senior security leadership from an external CISO.
- Structural security strategy and direction
- Security strategy and annual roadmap
The subscriptions have a minimum term of twelve months. Prices exclude VAT. Beforehand, we discuss scope, current setup and desired support to determine which subscription fits best.
Track record
Experience that adds up.
Norvault works from proven practical experience in certification, audits, penetration testing, training and international security direction.
Who supports you
See how Norvault organizes expertise and collaborationSenior direction, supported by the right expertise.
Norvault Security is led by owner Morrison Toussaint. Depending on the challenge, Norvault works with carefully selected freelancers and independent specialists. Morrison remains your point of contact and safeguards scope, cohesion and follow-up; each specialist remains responsible for their own expertise.
View Morrison on LinkedInemployees trained
active certifications maintained
countries active
penetration tests performed
audits performed
Sectors
Security that matches the sector, not a generic template.
SME organizations often ask similar questions, but rarely share the same risk profile. Norvault translates compliance, vCISO direction and technical validation into concrete output per sector.
Fintech & regulated growth
View all sectors and the sector-specific approachFintechs
Fintechs operate under pressure from clients, partners, auditors and regulators. Security must be demonstrable while still fitting cloud delivery, product development and commercial momentum.
SaaS & enterprise readinessSaaS
SaaS companies often receive security questions exactly when deals become larger. ISO 27001, penetration testing and client portals need evidence without a heavy internal security layer.
Manufacturing & operational continuityManufacturing
In manufacturing, security directly affects continuity. IT, OT, suppliers and production planning come together while budgets and capacity are often constrained.
Your Security Ally
Make your security question concrete.
Email what is happening. We will make scope, priority and the next step clear.