Cybersecurity Consulting and Advice - Nanfor
Basic Cybersecurity Consulting and Advice
The main objective of this service is to provide you with a basic cybersecurity plan tailored to the specific needs of your organization.
- An adapted use case is implemented
- The aim is to apply the basic documentation of your Information Security Management System (ISMS) according to ISO 27001 and ENS (medium-high category).
.
Activities
Nanfor will be responsible for carrying out a series of activities to guarantee the correct development of your basic cybersecurity plan; the service provided will allow you to:
- Understanding your organization's current risk situation, identifying the most valuable assets and data for your business.
- Ensure the continuity of your SME in the face of potential security incidents, minimizing the risk of disruptions to business activity.
- Develop and provide a detailed response plan to security breaches, defining specific protocols and actions in case of a cyberattack.
- Define and establish, together with you, a personalized cybersecurity strategy for the short and medium term.
- Comply with regulations and security standards related to data protection and information security.
- Prepare the basic documentation for the implementation of an ISMS (ISO27001 and ENS medium-high) for a core service offered to clients or public administrations.
- Develop and implement a use case tailored to your SME using appropriate techniques in the area of cybersecurity.
- Identify opportunities or potential uses of AI in the field of cybersecurity.
Scope of Cybersecurity Consulting Service - Basic

Estimated value of the service: 6000 euros
_________________________________________________
Advanced Cybersecurity Consulting and Advisory Services
You can request this Advisory Service if you already have basic security protection and a cybersecurity plan, but want to learn about more advanced protection systems.
.
Activities
Nanfor will be responsible for carrying out a series of activities to guarantee the correct development of your advanced cybersecurity plan; the service provided will allow you to:
- Analyze and perform penetration tests and vulnerability analysis of your organization by understanding the technological and operational environment in which you operate.
- Implement cybersecurity procedures and tools for the daily management of your organization. This will allow you to prevent, detect, and respond to threats.
- Proactively protect your organization against data-targeted attacks, improving resilience and response capabilities to threats.
- Raise awareness among your employees about the importance of cybersecurity and foster an organizational culture focused on cybersecurity and risk management.
- Identify opportunities or potential uses of AI in the field of cybersecurity.
- Develop and implement a use case tailored to your organization using appropriate techniques in the area of cybersecurity.
Scope from the Cybersecurity Consulting Service - Advanced

Estimated value of the service: 6000 euros
_________________________________________________
Cybersecurity Consulting and Advisory Services - Certification Preparation
If you already have basic security protection, an adapted plan, and the basic ISMS documentation structure, the main objective of this service is to help you with the implementation of advanced protection systems, taking advantage of the capabilities of artificial intelligence and preparing you to submit your ISMS for certification.
.
Activities
Nanfor will be responsible for carrying out a series of activities to guarantee the correct development of your advanced cybersecurity plan; the service provided will allow you to:
- Analyze and perform penetration tests and vulnerability analysis of your organization by understanding the technological and operational environment in which you operate.
- Review your cybersecurity policies, plans, and procedures, identifying weaknesses and areas for improvement.
- Proactively protect your SME against data-targeted attacks, improving resilience and response capabilities to threats.
- Raise awareness among your employees about the importance of cybersecurity and foster an organizational culture focused on cybersecurity and risk management.
- Prepare the documentation so you can submit it for certification of your ISMS for a core service you offer to clients or public administrations (ISO27001 and ENS medium-high, according to the CCN-STIC 825 Guide). Certification not included.
- Develop and implement a use case tailored to your SME using appropriate techniques in the area of cybersecurity.
Scope Cybersecurity consulting service - Certification Preparation
