NLNederlandsPlan an introduction

Services

Eight services, one clear security approach.

From ISO 27001 to penetration testing: choose the topic that matters now and see what Norvault adds and delivers.

View all servicesPlan an introduction

Services

Security control. Demonstrable and actionable.

Use Direction, Compliance or Assurance as the starting point. Norvault turns your security question into clear actions, evidence and follow-up.

01Direction

vCISO & security management

Best for:Organizations that want structural control over information security.
View vCISO services →02Compliance

ISO 27001 & compliance

Best for:Organizations that need to become and remain compliant or certified.
View compliance services →03Assurance

Assurance & validation

Best for:Organizations that need assurance for management, customers or auditors.
View audits and assessments →
LeadPrimary service

vCISO services

Senior security management without a full-time CISO.

Norvault helps with priorities, security roadmap, management reporting and ongoing direction across risk, compliance and execution.

When relevant

Relevant when security questions keep returning, while an internal senior security role is still too heavy or expensive.

Norvault adds

We bring calm, rhythm and decision-making so security no longer depends on ad hoc actions.

  • Security roadmap and quarterly priorities
  • Management reporting and decision input
  • ISMS follow-up with actions, risks and decisions
Plan an introduction about this serviceCompare vCISO, CISO and Security Officer

Compliance

Make frameworks workable and demonstrable.

ISOCompliance

ISO 27001 implementation

From scattered measures to demonstrable certification.

Norvault supports scope, risk assessment, policies, controls and audit preparation so ISO 27001 fits the real organization.

Output
  • Scope, gap assessment and implementation roadmap
  • Risk register, policy set and control mapping
Plan an introduction about this service
NIS2Compliance

NIS2 and the Dutch Cybersecurity Act

Translate duty of care and chain risk into action.

We turn governance, suppliers, incident preparation and risk steering into concrete actions for leadership, IT and operations.

Output
  • NIS2 and the Dutch Cybersecurity Act gap assessment with priority list
  • Governance, crisis plan and supplier actions
Plan an introduction about this service
AICompliance

AI governance & ISO 42001

AI governance that remains demonstrably controlled.

For organizations using or delivering AI, Norvault helps with governance, risks, policies and evidence around responsible AI use.

Output
  • AI scope and governance overview
  • Risk assessment for AI systems and data use
Plan an introduction about this service

Assurance and specialists

Additional assurance where the situation needs it.

Audit

Audits

Preparation and checks that make evidence clear.

Norvault supports internal audits, audit preparation and evidence reviews so clients, auditors and management get clarity faster.

When

Relevant before certification, client assessments, internal checks or periodic management reviews.

Output
  • Internal audit or evidence review
  • Findings list with impact and owner
  • Preparation for external audit or client request
Plan an introduction about this service
Risk

Risk assessments

Clear risks with owner, impact and follow-up.

We bring threats, vulnerabilities, processes and measures together in a risk view leadership and teams can actually use.

When

Relevant during growth, audits, new systems, suppliers, security signals or lack of overview on priorities.

Output
  • Risk register with impact, likelihood and owner
  • Priority list for measures and decisions
  • Reporting for leadership, IT and operations
Plan an introduction about this service
Test

Penetration testing

Technical assurance on what is actually vulnerable.

Applications, infrastructure and cloud environments are tested by ethical hackers, with findings that are useful technically and for management.

When

Relevant for releases, client questions, external attack surfaces, cloud changes or uncertainty about technical resilience.

Output
  • Pentest scope, test approach and findings report
  • Exploitability, impact and technical details
  • Management summary and remediation priorities
Plan an introduction about this service
People

Security awareness

Training that reaches behavior and decisions.

Awareness is connected to real scenarios, roles and day-to-day choices so employees and leadership apply security better.

When

Relevant when policies exist, but behavior, decisions or risk recognition are still lagging behind.

Output
  • Awareness sessions for employees or leadership
  • Scenarios around phishing, data, suppliers, reporting and escalation
  • Practical agreements for daily follow-up
Plan an introduction about this service

FAQ

Frequently asked questions about the services.

Which cybersecurity services does Norvault Security provide?

Norvault Security supports ISO 27001 implementation, NIS2 and the Dutch Cybersecurity Act, vCISO services, penetration testing, AI governance & ISO 42001, security awareness, audits and risk assessments.

Do I need to know which service I need already?

No. A short security question is enough. Norvault first helps determine whether the challenge is mainly direction, evidence, regulation, technical validation or awareness.

Does this fit SME organizations?

Yes. The services are designed for organizations that need senior security expertise while keeping security practical, affordable and executable.

Can compliance and penetration testing sit in the same program?

Yes. Technical findings can feed directly into the risk register, ISO controls, management reporting and the security roadmap.

Your Security Ally

Want to know which service fits your situation?

Email what is happening. Together we make the right scope, approach and concrete output clear.

Plan an introductionPricing