Alle dienstenAll services

ISO as a Service – Security Coaching

Van operationeel functioneren naar volwassen security leiderschap. From operational functioning to mature security leadership.

De functie is er. Het mandaat is er. Maar de diepgang, consistentie en strategische impact kunnen sterker. The role is there. The mandate is there. But the depth, consistency, and strategic impact can be stronger.

Voor wie is dit bedoeld?Who is this meant for?

  • Control owners
  • Security officers
  • TPRM managers
  • Risk & compliance
  • CISO’s
  • SecurityteamsSecurity teams

Wat ik doeWhat I do

01

Inhoudelijke diepgangTechnical depth

  • Informatiebeveiligingsbeleid & governanceInformation security policy & governance
  • Praktisch toepasbaar risk managementPractically applicable risk management
  • Third party risk (DORA, ketenborging)Third party risk (DORA, supply chain assurance)
  • Frameworks (ISO 27001, NIS2)Frameworks (ISO 27001, NIS2)
  • Board reporting & communicatieBoard reporting & communication
02

Strategische positioneringStrategic positioning

  • Positionering binnen de organisatiePositioning within the organization
  • Draagvlak creëren zonder blokkadeCreating support without blockage
  • Effectief omgaan met weerstandEffectively dealing with resistance
  • Groei naar de rol van ‘trusted advisor’Growth into the ‘trusted advisor’ role
03

Operationele effectiviteitOperational effectiveness

  • Werkbare risicoanalysesWorkable risk analyses
  • Borging van opvolging bevindingenEnsuring follow-up of findings
  • Prioritering in overvolle backlogsPrioritization in overcrowded backlogs
  • Verbinding met DevOps & architectuurConnecting with DevOps & architecture

De aanpakThe approach

Dit is geen theoretische training. Dit is meelopen, spiegelen, aanscherpen en verbeteren in de praktijk. This is not a theoretical training. This is shadowing, mirroring, sharpening, and improving in practice.

  • 1-op-1 coaching & teamsessies1-on-1 coaching & team sessions
  • Review van beleid & rapportagesReview of policy & reports
  • Praktisch maturity assessmentPractical maturity assessment
  • Concrete verbeterroadmapConcrete improvement roadmap

Waarom deze aanpak?Why this approach?

“Ik ben niet alleen beleidsmatig gevormd. Ik ben begonnen als techneut.” “I am not just trained in policy. I started as a technician.”

Ik ken de operatie. Ik heb zelf aan de knoppen gezeten. Ik begrijp hoe IT-architectuur, datacenteroperaties en security governance samenkomen. Die combinatie maakt het mogelijk om security niet alleen theoretisch correct, maar ook praktisch uitvoerbaar te maken. I know the operation. I have worked behind the controls myself. I understand how IT architecture, data center operations, and security governance converge. That combination makes it possible to make security not just theoretically correct, but also practically executable.

Het resultaatThe result

Na het traject is het team zelfstandig sterker. After the process, the team is independently stronger.

  • Meer structuur in governanceMore structure in governance
  • Betere risicoduidingBetter risk assessment
  • Sterkere third party controleStronger third party control
  • Heldere rolafbakeningClear role definition
  • Hogere procesvolwassenheidHigher process maturity
  • Meer zelfvertrouwen in de rolMore self-confidence in the role

Security maturity groeit niet vanzelfSecurity maturity does not grow by itself

ISO as a Service – Security Coaching is bedoeld voor organisaties die hun security professionals willen laten groeien van uitvoerend naar strategisch impactvol. ISO as a Service – Security Coaching is designed for organizations looking to let their security professionals grow from operational to strategically impactful.

Niet door meer beleid, maar door beter te worden. Not through more policy, but by becoming better.

Laat je gegevens achter, dan nemen we spoedig contact met je op. Leave your details and we will contact you soon.