Free · 2 minutes
Most businesses fall under at least one, and Law 195/2024 has been in force since 23 August 2026. Answer 7 quick questions for an instant, tailored read: which laws apply to you, where your gaps are, and where to start. No email required.
Penetration testing, an external CISO function and readiness for ISO 27001, SOC 2, NIS2 and GDPR.
Skip to the checkFree · 2 minutes
Most businesses fall under at least one, and Law 195/2024 has been in force since 23 August 2026. Answer 7 quick questions for an instant, tailored read: which laws apply to you, where your gaps are, and where to start. No email required.
Cybersecurity consulting
Penetration testing, an external CISO function and readiness for ISO 27001, SOC 2, NIS2 and GDPR.
recon://target 6 exposures found
Free · 2 minutes
Most businesses fall under at least one, and Law 195/2024 has been in force since 23 August 2026. Answer 7 quick questions for an instant, tailored read: which laws apply to you, where your gaps are, and where to start. No email required.
Regulatory coverage
GDPR and NIS2 across the EU, ISO 27001 and SOC 2 for the customers who ask for them, and Moldova's Law 195/2024 and Law 48/2023 for companies operating there. We start from the obligations that apply to you and build one evidence file that serves all of them.
General information, not legal advice. References to regulators and named frameworks are for identification only. Check your obligations against the official texts.
What we do
ISO 27001, SOC 2, NIS2 and GDPR all expect someone accountable for security, and often a data-protection officer. That function does not require a department. As your external CISO, we keep the policies, the risk register, the vendors, the audits and the relationship with auditors and regulators.
Penetration tests on applications, networks and cloud, plus phishing simulations. Every finding comes with steps to reproduce it and the order in which it is worth fixing.
Readiness for ISO 27001, SOC 2, NIS2 and GDPR - and for Moldova's Law 195/2024 and HG 562/2025 where they apply: policies, risk register, controls and the evidence file your auditor will ask for.
Network, cloud, identity, backups. We look at how it is actually configured, not at the diagram, and give you the hardening list in order of impact.
Copilots and AI agents reach real data. We define what they may touch, test what happens when someone tries to trick them, and write a policy you can actually enforce.
Salient.sec
Salient.sec takes ISO 27001, SOC 2, NIS2 and GDPR - and local regimes such as Moldova's Law 195/2024 and Law 48/2023 - and turns them into concrete controls with owners, deadlines and evidence. Records of processing, data-subject requests, breach notifications, vendors and policies live in one place, in English, Romanian and Russian.
Enable a framework and you get its requirements as a working list. What ISO 27001 already covers is ticked for SOC 2, NIS2 or a local regime too, so the same work is never done twice.
Records of processing, DPIAs, data-subject requests with their statutory clocks, breach notification to the regulator within 72 hours, a consent register. Everything GDPR asks for, as a workflow with deadlines.
Connects to Microsoft 365, Google Workspace, Azure, AWS and GitHub and reads the real state of your controls: MFA, devices, access. Your auditor gets a read-only audit room.
Built on ISO 27001, SOC 2, GDPR, NIS2, NIST CSF and CIS. Local regimes mapped on top: Moldova's Law 195/2024, Law 48/2023 with HG 562/2025, NBM Regulation 29/2025.
Salient.sec is in open beta: we already run it with our first clients and build it at their pace.
Describe your situation briefly. As a rule we reply within one business day; where useful, we begin with a 30-minute call.
