GRC & Compliance

ALGORCOMP from Wroclaw builds custom systems, AI agents and automation and implements Microsoft 365 Copilot and Power Platform for B2B companies. Its Security and Compliance area offers NIS2 implementation, IT security audits and a virtual CISO service.

Andersen is a software development and IT consulting company delivering digital transformation and custom software projects. A separate cybersecurity practice provides MDR and SOC as a service, EDR deployment, penetration testing, and security audits with compliance gap assessments against ISO 27001 and GDPR.

IT integrator for the defence, telecom, energy and finance sectors offering ICT security audits, 24/7 monitoring, SIEM and SOAR, network protection, endpoint EDR, email and data security, next to its network integration and data centre business.

Cybersecurity company providing penetration testing and security audits, cybersecurity monitoring, secure coding and DevSecOps, cloud security, and compliance support for ISO 27001, GDPR and NIS.

B3 Consulting Poland is an IT consulting and outsourcing company, part of the B3 group, supporting clients in digital transformation, ServiceNow and AI solutions. Under the B3 CyberSecurity brand it delivers penetration testing and cyber attack simulations, risk governance and compliance advisory, SOC advisory, and security awareness training.

GRC platform for business continuity, risk and third-party management, built for DORA and NIS2 compliance in banking, insurance and critical infrastructure.

Application security firm providing application, API and infrastructure penetration testing, red teaming, continuous security assessment, DevSecOps implementation, strategic compliance advisory and training for developers, DevOps teams and pentesters.

Advisory firm focused on cybersecurity and GRC: IT and information security audits, ISO 27001, NIST, SOC 2 and ISO 22301 implementations, and risk and compliance tooling.

CA Cybersecurity Analytics is a Gdansk-based provider of cybersecurity and risk analytics services that combines expert knowledge with AI-driven automation. It helps organisations turn scattered data into a coherent, measurable risk model. The offer covers three proprietary solutions: UCM, which integrates assets, threats, vulnerabilities and safeguards; RAP, which analyses risk across assets, people, compliance, suppliers and data; and DDM, which supports data correlation and remediation planning. The company provides vulnerability assessment, penetration testing, data protection, network monitoring, incident response and ISMS automation. It supports compliance with NIS2, DORA, the AI Act and the Cyber Resilience Act. It also delivers AI projects, deploying models and governance solutions. A team with more than 20 years of experience serves clients in Poland, the United Kingdom, Germany and other countries. The first consultation is free of charge.

A management system certification body operating within the Military University of Technology (Wojskowa Akademia Techniczna) that certifies, among others, information security management systems against ISO/IEC 27001. It operates under PCA accreditation no. AC 057, granted in 1999. The scope of this accreditation also covers ISO 22301, ISO 9001, ISO 14001, ISO 45001, ISO 50001 and ISO 22000.

Cybersecurity integrator and advisor delivering NIS2 audits, vCISO services, penetration testing, SOC outsourcing and security awareness programmes.

CERT/CSIRT specialist offering SOC outsourcing, security audits against ISO 27001 and Poland's National Cybersecurity System, response team build-outs, malware analysis and penetration testing.

Cybersecurity services and advisory firm supporting organisations through a network of specialised partners.

Cybersecurity firm offering penetration testing, red teaming and OSINT alongside NIS2 and DORA audits, including Threat-Led Penetration Testing for financial institutions.

Distributor of IT security technology (ESET, Stormshield) providing audits, deployments and technical training, including penetration tests and security policy work.

Software, hosting and systems maintenance provider running a security operations centre with SIEM, SOAR and vCISO services, asset management and NIS2, DORA and ISO 27001 support.

Independent certification and audit body covering information security management, cloud services and business continuity, plus compliance audits against sector standards.

Cybersecurity practice within the Deloitte advisory firm: NIS2, DORA and GDPR compliance, SOC build and run, MXDR, threat intelligence, cloud and OT/ICS security, data protection and Zero Trust architecture.

Devopsity is a DevOps company that designs, migrates and operates cloud infrastructure. Its security and compliance service assesses the security posture of AWS environments, implements threat detection, supports incident response, and prepares organisations for ISO 27001, NIS2 and GDPR compliance.

IT outsourcing and support provider that also deploys EDR, network security with segmentation and UTM/NG, DLP systems, vulnerability analysis and phishing tests. It helps organizations assess KSC/NIS2 obligations and prepare compliance documentation, and builds backup and disaster recovery systems.