Cybersecurity consulting for Galician companies that do not have an in-house security team. On site in Santiago de Compostela, A Coruña and Vigo, and remote everywhere else. In Spanish, Galician or English.
I mostly work with SME management teams who have to make security decisions without a specialised team behind them: what to protect first, what customers ask for, what the law requires and what each thing costs.
What I deliver serves management, who decides, and IT, who executes: clear conclusions and concrete actions ordered by impact and effort.
A security questionnaire, a cybersecurity clause in the contract or a customer audit. You have to answer with judgement and with evidence.
NIS2 reaches more sectors and, through the supply chain, also companies that are not directly obliged but serve those that are.
Copilot, ChatGPT or AI features inside tools you already pay for, without knowing which data goes in or what the AI Act requires.
I travel to Santiago de Compostela, A Coruña and Vigo for meetings with management, audits on your premises and team training. The rest of the work is done remotely, wherever you are.
If you are in another part of Galicia, we look at it when preparing the proposal. And I work in Spanish, Galician (galego) or English, whichever you prefer.
Meetings with management, on-site audits and team training.
Meetings with management, on-site audits and team training.
Meetings with management, on-site audits and team training.
Agreed in the proposal, together with the scope.
Same method and same deliverables.
Working languages: Spanish, Galician (galego) and English.
These are the frameworks that most often apply in the sectors with the most weight in the Galician economy. Each case is confirmed by looking at the specific company.
When the customer is a manufacturer and requires proof of information security.
Sectors where stopping for a day costs money and the supply chain matters.
When you bid for or provide services to public bodies.
When customer trust depends on how their data is handled.
Four steps, with scope and costs agreed before starting each one.
You tell me what you do, who asks what of you and what worries you. Thirty minutes, free and without commitment.
Where you stand against the framework that matters to you, with actions ordered by impact and effort. For companies with fewer than 100 employees there is an initial diagnostic at a fixed price.
What gets done first, who does it and what it costs. Management knows what it decides and IT knows what it executes.
If you need continuity, as an external CISO or with specific projects: management system, training or Microsoft security.
The reference points are Santiago de Compostela, A Coruña and Vigo. If you are elsewhere, it is looked at case by case when preparing the proposal. Remote work does not depend on where you are, so anything that does not require being on your premises is done the same from anywhere.
In Spanish, Galician (galego) or English, whichever each company prefers. Reports and documents are delivered in the language you choose.
No. My priority client is the SME with few internal cybersecurity resources, where management has to decide without a specialised team behind it. For companies with fewer than 100 employees there is an initial diagnostic at a fixed price on the cybersecurity audit page.
No. The IT provider keeps running operations. My job is to review where you stand, order the priorities, translate them for management and check that what is decided gets done. Often the IT provider is the one who most appreciates having a written plan.
Travel is detailed in the proposal together with the scope and the days, which are agreed before starting. That way you know the full cost from the beginning.
With a 30-minute conversation, free and without commitment. You tell me what you do, who asks what of you and what worries you, and we see whether a diagnostic, a plan or simply answering a specific question makes sense.
Tell me what it does, who asks you for security requirements and what worries you. One conversation is enough to see whether you need a diagnostic, a plan or just a question answered.
I reply personally within 24 working hours · No commitment