I'm Antonio Cebreiro. I help you understand your risks, set priorities and put the measures you need into practice. You work directly with me, from the first assessment to follow-up.
A free, no-obligation 30-minute first conversation. Send me a message and we’ll agree a time to talk.
Four ways to help, depending on your situation. We agree the scope and deliverables of each project before starting.
You need to know where you stand and what to tackle first. We review risks and gaps to inform decisions by management and IT.
You receive a findings report and a roadmap with priorities, owners and next steps.
You need to review or implement controls for access, email and information. We start with your environment and the capabilities available in your licences.
The agreed controls are documented, together with validation tests and guidance for operating them.
You need someone to coordinate security and follow through on decisions, working with management, IT and suppliers.
We work from a recurring plan and a report covering progress, risks and outstanding decisions.
You need your workforce and management to recognise risks and respond. Sessions are tailored to their roles and working situations.
The plan includes sessions, practical exercises and learning assessments to identify where further training would help.
No blind commitments: every step has a known format and you decide with all the information in front of you.
A free, no-obligation 30-minute call to understand your situation, clarify what you need and discuss the next step.
If it makes sense to continue, you get a fixed proposal: scope, timeline and price. Priorities ordered by real risk, in a document your management can actually read.
We execute the plan together, at your pace: a one-off project or monthly follow-up, with me at the other end whenever something comes up.
Part of what I use with my clients is open to everyone: self-assessments and checklists you can use today, with no sign-up and without leaving your data anywhere.
Check whether your company falls under Directive (EU) 2022/2555 through Annexes I and II, assess 16 controls mapped to Articles 20, 21 and 23, and download a PDF report with your prioritised gaps.
Open the tool →
Pick the Microsoft 365 plan you have and instantly see which Microsoft Purview capabilities it covers and which are missing. Nineteen capabilities, nine plans, and for anything missing it tells you which plan unlocks it.
Open the tool →There is no email wall and no “leave us your details to see your result”. This is the deal, and you can verify it:
I am a computer engineer and cybersecurity consultant. I have built and led security teams from scratch, combining technical work and strategy. I work freelance and remotely, alongside your team.
ISO/IEC 27001 and ISO/IEC 42001 Lead Auditor, and AZ-500 · Azure Security Engineer. My professional profile covers my areas of expertise, credentials and frameworks.
View my professional profile →I have shared my experience at AMTEGA, CIBERECO and CIBERGAL, among other industry events.
View talks and publications →
Speaking · industry event
Is your challenge about people rather than security? I am also a co-founder of Usoarit, a human resources consultancy for technology companies.
If you're looking for someone approachable and trustworthy to protect your company, tell me where you stand right now. I'll reply personally within 24 business hours.
