Information Security and Business Continuity
Ensure compliance that truly enhances your company's security!
CYBER
Customized solutions
We don't apply ready-made templates. We know from experience how your industry functions, which is why we can create effective procedures and advise on practical solutions. We will analyze your needs and the specifics of your business to determine the best level of protection for you in the digital world. Thanks to our knowledge and experience, you will achieve real benefits – minimizing the risk of cyberattacks, protecting sensitive data, and ensuring the continuity of your company's operations.
Our basic offer includes services such as:
- security audits, particularly those required by NIS2 and the National Cybersecurity System Act,
- creation of documentation based on ISO 27001, ISO 22301, ISO/IEC 62443, NIST or COBIT standards, including business continuity and disaster recovery plans,
- support in risk analysis and business impact assessment (BIA),
- assistance with incident classification and determination of reporting obligations,
- crisis management support in the event of a cyberattack – assistance for management, CISO, DPO, and technical teams conducting recovery operations,
- representation before public authorities in matters concerning digital security and cybersecurity incidents.
Together with our technical partners, we can also help you perform vulnerability assessments (including penetration tests), analyze device configurations, or implement security monitoring solutions.
GDPR
Personal data management under full control.
Compliance with GDPR doesn't have to be just a burdensome obligation. Avoiding penalties for violations is only one of the benefits of fulfilling the requirements set out in the regulations. Trust the experts and implement solutions in your company that will ensure the real security of the information processed. We provide transparency and order in data processing.
We offer a wide range of services to help you properly plan and execute processing operations. These include:
- conducting and documenting a risk analysis or a data protection impact assessment (DPIA),
- creating a personal data protection policy and detailed policies and procedures (including cookies, privacy in systems and on websites, procedures for implemented protection mechanisms),
- drafting or reviewing
- data processing agreements,
- privacy notices,
- documented authorization for data processing,
- confidentiality statements,
- statements of applicability (SoA) and other security measure documentations,
- SLA descriptions for IT or OT systems,
- creating templates for records or registers,
- documenting data protection analyses at the design and implementation stage of ERP systems for business automation (the so-called privacy by design and privacy by default).
AI INTEGRATION
Artificial Intelligence? Don't be afraid of it! Automation can be scaled to fit your business.
Introducing AI into your company isn't a futuristic vision, but a real opportunity to streamline processes and increase efficiency. With the current pace of change in this area, you can get lost in a maze of technological innovations and legal complexities. We know how to help you.
We don't believe in ready-made solutions. Every organization is different and therefore needs an individual approach. We start with an in-depth analysis of your processes to identify those with the greatest potential for automation. Together, we will assess available tools, resources, and capabilities, and then develop a comprehensive AI implementation plan that takes into account all formal aspects.
Our support includes the following elements:
- audit of your processes, understood as identifying areas with the greatest potential for automation,
- assessment of tools and resources, including an assessment of available technologies and necessary resources (finance, personnel, time),
- formal requirements specification, which ensures compliance with regulations and your existing agreements for the use of systems and databases, in terms of security requirements and the admissibility of configuring APIs for AI,
- strategy development and implementation schedule, created as a personalized step-by-step plan,
- purchase parameterization, including list of parameters relevant to choosing a technology or integration services provider, and support in negotiations with suppliers, and support with negotiations with suppliers,
- personel training, which shall prepare your team to independently verify whether the project meets the set requirements and monitor compliance of activities with compliance requirements.
We implement AI thoughtfully. We don't forget about data security and regulatory compliance. Cybersecurity is our priority, so we will ensure that your data is always protected in accordance with the law, regardless of how you change your processing procedures.
IT CONTRACTS
Software that meets your exact requirements.
We'll help you purchase off-the-shelf solutions – whether you're buying software as a product (BOX) or as a service (SaaS). Do you want to be sure that your clients, subcontractors and partners can use it? Or maybe you're buying it for your capital group's subsidiaries and need to ensure such usage? We'll check if the licensing terms in the regulations and terms of service allow you to use the software in your company as you need.
We know how software development projects are carried out. That's why we can easily prepare a template for project documentation and a draft contract for custom software development. We'll help you navigate through sprints and properly formulate requirements for work acceptance. We'll prepare the contractor's obligations regarding secure access to your infrastructure and responsibility for SLAs in the case of service provision (HelpDesk support).
Training for managers
Are you short on time to keep up with constant legal changes? Don't want to fall behind competitors who are quick to implement new solutions? Or maybe the regulations require you to document specific training?
We know the code - use it.
Industrial activity and trade in products
Avoid the time-consuming and frustrating hassle of regulatory bureaucracy!
ENETERING AND OPERATING EU MARKETS
We provide support to companies across the entire spectrum of product manufacturing and distribution.
We assist in planning the conformity assessment process and developing the related documents. What do our clients come to us with? Most often, they request assistance concerning:
- determining the obligations that must be fulfilled in connection with the production or sale of different types of products,
- specifying the required product labeling on EU markets for own products and DIY brands, also for imported products,
- preparing or reviewing contracts in the supply chain (with designers, raw material suppliers, manufacturers and distributors),
- reviewing the content of declarations of performance (DoP/KDWU), declarations of conformity (DoC), or safety data sheets (MSDS),
- creating information accompanying products, in particular the content of labels,
- organizing promotional campaigns and competitions,
- defining the course of processes related to lead acquisition and customer service, including the development of sales regulations in electronic and stationary channels,
- developing complaint procedures and those related to product withdrawal from the market.
ENVIRONMENTAL PERMITS
Operations that fulfills legal requirements
Businesses that can impact the environment are subject to strict regulation. Running them requires obtaining permits or licenses. We know how frustrating it can be to get them. Errors in the description of the installation, difficulties in determining the parameters of its operation, lack of knowledge of the language of regulations – these are just some of the traps that await you. We know how to deal with them.
We have experience in handling issues related to environmental permits – both integrated and sector-specific (for waste production, emissions to the environment, or water law). Thanks to our support, clients can efficiently navigate through the maze of regulations and formalities.
We write applications to offices to issue the necessary decisions. We help determine whether an entity that was created from the transformation or division of a company must obtain new decisions or can operate on old ones. We guide foreign clients through the procedure of creating a branch, subsidiary, or domestic company. We obtain individual interpretations in case of doubts regarding obligations arising from legal regulations.
WASTE MANAGEMENT
Business in harmony with the environment
Depending on the nature of their business, the quantity, and composition of waste generated, entrepreneurs may be required to obtain an entry in the register, authorization, or permit related to waste management.
This particularly applies to companies:
- generating hazardous waste exceeding 1 ton per year or non-hazardous waste exceeding 5,000 tons per year,
- transporting waste,
- processing waste,
- producing packaging or products in packaging,
- producing batteries and accumulators,
- producing electrical or electronic equipment.
We help verify which administrative decision or register entry is needed. We prepare draft applications and represent clients in proceedings before public authorities. We develop opinions on the scope of obligations and how to fulfill them, including the organization of storage areas on the premises.
We provide support in planning activities related to the international transport of waste. We verify the admissibility of transporting specific waste codes, vehicle requirements, and required documents. We create, among other things, draft agreements:
- for waste collection and management,
- transfer of responsibility for waste generated in common property during renovations or other services provided by external entities,
- concluded with recycling organizations.
If substances or materials that can be further processed are produced during production, we report them as by-products. This reduces the burden associated with reporting them in the BDO system and the regulations regarding their storage.
ESG
Sustainable development is not an option, but a necessity!
In an era of increasing ecological and social awareness, ESG is becoming a key element of every responsible company's strategy. How to implement these principles not only to meet legal requirements, but also to really build your competitive advantage? We can help you with this, tailoring these actions to the specifics of your business.
The basis for success is properly determining how your company impacts the environment and how other entities affect you. We will assess your current practices, capabilities, and resources, and then develop a comprehensive ESG strategy implementation plan, taking into account all legal and operational aspects.
Our support includes:
- analysis of ongoing operations, to determine how your company impacts the environment and society throughout the value chain,
- identification and assessment of ESG risks including the identification of key areas for improvement in environmental, social, and corporate governance,
- development of an ESG strategythat will be tailored to applicable legal requirements and consistent with your business goals,
- implementation of reporting standards, which includes support in preparing supply chain questionnaires and ESG report content,
- personel training, which is focused on preparing selected members of your team to effectively implement and monitor the ESG strategy,
- support in stakeholder dialogue, including assistance in building relationships with investors, customers, employees, or the local community.
MARKET COMPLIANCE INSPECTIONS
We will translate for you in dealings with the officials
Does your company encounter legal issues concerning antitrust litigation or infringements of collective consumer rights? Are you worried about investigations or product inspections from agencies like the Trade Inspection Authority or the Voivodeship Inspector of Building Supervision? Or maybe you have been contacted by the Voivodeship Inspector for Environmental Protection concerning your emissions or waste disposal practices?
Our deep understanding of inspection regulations ensures we know the required formalities at every stage. We can pinpoint the inspectors' concerns and help you gather the documents they need. We'll review the inspection report and help you submit any necessary comments. The sooner you reach out, the better we can assist you.
