A critical role
Organisations whose smooth and secure operation matters to others.
Everyone Deserves to Be Secure
Cybersecurity tailored to your organisation
From a readiness review, through implementing legal requirements and good practice, to ongoing security support. Proportionate to scale and risk, advisory and independent of vendors.
Critical, yet small
Small and medium organisations are the backbone of the European economy, and many of them perform critical roles despite limited resources, from healthcare, through transport, to the safety of medicines.
Limited resources
Without the large security departments found in major corporations.
A proportionate approach
Safeguards matched to real risk and scale, not overdone.
That is why we do not offer solutions designed for corporations, but match safeguards to real risk. We work with public and private organisations, in Poland and across Europe.
How we help
We work in three steps. Each can be bought separately, and together they form a path from diagnosis to lasting security.
We focus on preparation, standards and knowledge. We do not provide operational security services such as SOC, SIEM or 24/7 monitoring, which is how we remain an independent, objective adviser to your organisation.
Are you on the KSC register?
Essential and important entities in Poland must implement their obligations by 3 April 2027. Our readiness review starts by checking whether your status on the register is correct. Then we show what needs to be done and in what order.
We understand ecosystems, not isolated entities
A hospital depends on its laboratory and pharmaceutical wholesaler, the wholesaler on the manufacturer and on transport, and a weakness in one link becomes a risk for the others. That is why we assess every organisation as part of the chain it operates in, not as an isolated case.
Healthcare
Hospitals, clinics, laboratories and diagnostics. Patient data, continuity of care, suppliers of medical systems.
Pharmaceuticals and medicine distribution
Manufacturers and wholesalers, medicines verification. Continuity of supply and data security across the chain.
Transport
Railway undertakings. Continuity of operations, security of systems and suppliers, incident reporting.
We treat security as support for people and their everyday work, not as another burden.
Results of our work
We describe our work anonymously, but with a concrete result.
Railway undertaking
New obligations under the Polish national cybersecurity system and a short deadline. Gap analysis, registration, documentation of the information security management system and training.
Result: requirements implemented ahead of the statutory deadline, and incident management procedures tested in an exercise with the team.
Specialist hospital
No complete picture of its security posture ahead of new obligations. A cybersecurity audit, a roadmap of actions leading to meeting the requirements, and staff training on incident response.
Result: management received a prioritised action plan ready to be carried into the budget, and staff know what to do in the first hours of an incident.
EU project for healthcare
A three-year Digital Europe project worth €3.2 million, coordinated by us in a consortium of four Polish companies, for six healthcare organisations.
Result: more than 1,000 staff trained and the click rate in phishing tests reduced from 11% to 3%.
Why you can trust us
We will not show our clients' logos here, just as we will not show yours elsewhere. We describe our work only anonymously. We build credibility through knowledge, experience and genuine commitment to the security of the sectors we serve.
Knowledge confirmed by publication
Our founder is the author of a book on implementing NIS2 in Poland, published by INFOR. We do not explain the rules at second hand, we help shape the way the market understands them.
Genuine commitment, not only commerce
We coordinate ASCLEPIUS, a European project strengthening the cybersecurity of healthcare entities, committing our own resources to it. We treat the security of the health sector as a mission, not only as a service.
Competence confirmed by certifications
Our team holds industry certifications, including CISA, CCSP, CIPM and ISO/IEC 27001, 42001 and 22301 lead auditor certificates. We know the standards inside out, so we know which requirements your organisation really needs and which would be excessive.
A voice for smaller organisations
Small and medium-sized enterprises make up 99% of businesses in the European Union, yet cybersecurity regulations often treat them like corporations. In public consultations, national and European, we consistently argue for requirements proportionate to scale and risk. We apply the same approach with every client. We are a member of ECSO, the European Cyber Security Organisation.
"We recommend IS Consulting as a competent advisory partner in assessing and building compliance with the KSC, cybersecurity audits, training and preparation for supervisory requirements."
Work for the community
Beyond our advisory work we engage in the security of the whole market, independently of our commercial activity. We share knowledge and help shape regulation through public consultations.
Influence on regulation
We comment on legislative initiatives in public consultations at national and European level, from NIS2 and the CRA to the EHDS and the MDR. We prepare recommendations for regulated sectors and for small and medium-sized enterprises.
Knowledge and publications
As the author of a book on implementing NIS2 in Poland, we help shape how the market understands the new regulations. We publish analyses for small and medium-sized enterprises, positions in public consultations, and the ASCLEPIUS project report.
Let us talk about the security of your organisation
You do not need to be ready for a large project. A conversation about where you are and what the law requires of you is enough. We will help you plan realistic, workable steps.
- contact@isconsulting.pl
- Address
- ul. Żelazna 51/53, 00-841 Warszawa, Poland