Work

Examples, not promises.

We only give names when it is explicitly okay. So anonymised — but with real starting points, real steps and real results.

ISO 27001 Engineering · 120 employees

From “we don't know what we have” to certification in seven months.

Starting point

A major OEM customer requires an ISO 27001 certificate for new contracts. Internal IT: two people, no security processes, no time.

Approach

Risk assessment in the first phase, policies and TOMs implemented in two quarters, audit support through both stages.

Result

Certified after seven months. The OEM contract is in — and the second audit ran without new critical findings.

NIS2 Logistics · 300 employees

In scope — and still calm.

Starting point

The classification was unclear, customers were sending questionnaires that no one could assign. A CISO position had been vacant for months.

Approach

NIS2 classification, obligations and reporting catalogue, a governance model that holds up without a dedicated security team — plus a tested reporting process.

Result

In scope, but manageable: the reporting process is documented and rehearsed, and customer questionnaires have since been answered from a single source.

TISAX Automotive supplier · 80 employees

Level 3 confirmed — without a single critical finding.

Starting point

Customer request: TISAX Level 3. Internal assessment: “We won't make it without a consultant.”

Approach

Gap analysis per VS-ITS, an action plan the team could implement itself, and accompaniment through the assessment body.

Result

Level 3 confirmed, no critical deficiencies. New business in the automotive sector was reactivated.

We thought TISAX was not achievable for us. Five months later the assessment was through — without a single critical finding. What no one tells you: the longest part of the journey was convincing ourselves that it could not be done without a consultant.

Technical director · Automotive supplier, 80 employees

Your starting point sounds familiar?

Then let us hear it. 30 minutes, no obligation — and afterwards you will know which path is realistic for you.

Book a first call hallo@vigilwright.com