Cybersecurity consulting: governance, risk and compliance

{"items":[{"question":"Where should an organisation begin its cybersecurity programme?","answer":"Begin with a maturity assessment, risk mapping, identification of applicable requirements and a prioritised action plan."},{"question":"Does OLING provide ISO 27001 support?","answer":"Yes. OLING helps scope the ISMS, document policies, organise evidence and prepare for audits. OLING does not issue certification."},{"question":"How can organisations approach NIS2 or DORA without overburdening their teams?","answer":"The process begins with a gap analysis, followed by prioritisation across risks, suppliers, incidents, continuity, evidence and responsibilities."},{"question":"How are cybersecurity and business continuity\/disaster recovery connected?","answer":"Cyber risks must be linked to critical activities, crisis scenarios, RTO\/RPO targets, recovery testing and the return to normal operations."},{"question":"Does OLING provide Security Operations Centre or penetration testing services?","answer":"No, except through a partnership or specific scoping engagement. OLING primarily focuses on assessment, governance, compliance, risk, continuity and management."},{"question":"Is MAPSI useful for managing security?","answer":"MAPSI can centralise risks, audits, actions, controls, documents, incidents and evidence when the programme requires ongoing monitoring."}]}