You know which requirements apply to your business.
Compliance consulting
We advise you on GDPR, ISO 27001 and BSI IT-Grundschutz. The result is a list of measures, ordered by what matters most for your business.
Your Benefits
You get a workable list of measures rather than a thousand-page standard.
You go into external audits well prepared and without a last-minute rush.
We help with the record of processing activities and the risk assessment.
Service scope
Initial workshop to establish what applies (GDPR always, ISO voluntary)
Comparison of your current state with the chosen standard (gap analysis)
List of measures, prioritised by effort and risk
Support with the record of processing activities and the risk register
Support during the external audit, if required
Training material for your staff
Requirements and exclusions
→ Prerequisites
- The IT strategy workshop (NDS-PRJ-STRAT) is recommended as a basis.
- You have appointed a data protection officer, internal or external.
- Senior management backs the project.
✗ Not included
- The certificate itself is issued by external auditors, not by Netsource Data Systems.
- Legal advice, for example on contract clauses or data processing agreements, is provided by lawyers.
- Technical implementation of the measures is covered by separate building blocks (NDS-SEC-COMPLIANCE, NDS-SEC-WAZUH).
- Data protection training for staff is a separate building block, NDS-PRJ-SCHUL.
Related Services
IT strategy workshop
Over 1–2 days we work with your management and IT leads on an assessment of where you stand, a roadmap and a prioritised list of measures.
Compliance monitoring
We check your IT against GDPR and ISO standards on an ongoing basis. The technical controls run automatically, and you receive a report every quarter.
Staff training
We train your staff on Microsoft 365, Nextcloud, IT security and new software, on site or by video, with exercises and handouts to take away.
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.