I will perform iso 27001 and nist cybersecurity assessment
Senior Software Engineer Software Architect
About this Gig
I will perform a professional cybersecurity maturity assessment aligned with enterprise security and compliance standards such as ISO 27001, NIST, NIST 2, ENS, DORA, TISAX and OWASP.
This service is designed for companies that want to identify security gaps, evaluate their cybersecurity posture, improve governance processes and receive a structured roadmap for future improvements.
The assessment may include:
- Security maturity evaluation
- Gap analysis
- Risk matrix
- Compliance readiness analysis
- Governance review
- High-level security recommendations
- Strategic implementation roadmap
- RTO/RPO analysis
- Executive summary
IMPORTANT:
This Gig focuses on cybersecurity assessment and consulting services only.
Implementation, remediation, deployment, active monitoring, infrastructure hardening, SOC operations, penetration testing, secure software development and technical implementation services are NOT included unless explicitly agreed as an additional project.
Basic and Standard packages are primarily based on the information provided by the client through questionnaires and documentation.
The Premium package includes interviews, workshops and a more detailed organizational analysis.
Business type:
Nonprofit organizations
•
SMBs
Industry:
Business services & consulting
•
Cyber security
•
Software
My Portfolio
FAQ
What frameworks do you use?
ISO 27001, NIST, NIST 2, OWASP, ENS, DORA and TISAX depending on the client requirements.
Does this include implementation?
No. This Gig focuses on assessment, analysis, documentation and strategic recommendations. Technical implementation is quoted separately.
Do you sign NDAs?
Yes. Confidentiality and information protection are extremely important during cybersecurity assessments.
Is this suitable for small businesses?
Yes. The assessment can be adapted for startups, SMBs and enterprise environments.
Can you assess secure software development processes?
Yes. The assessment may include secure development practices, governance, SDLC and DevSecOps maturity reviews.

