TuringTechnology consulting
Consultants who also run what they recommend.
Cybersecurity, regulatory compliance, audit and technology strategy, with the judgement of a team that operates mission-critical infrastructure every day.
Desliza para ver la figura completa →
Advice we follow ourselves
Certified in what we advise on
We hold ENS High category and ISO 27001. We know the certification process from the inside, not just in theory.
A technical team, not just paperwork
The people advising you know how to configure, deploy and operate. The measures we propose are realistic and can be implemented.
Concrete deliverables
Actionable reports, plans and procedures, with priorities and effort estimates, not generic slide decks.
Cybersecurity consulting
We help you achieve and keep what we already hold ourselves: ENS High category and ISO 27001.
ENS and ISO 27001 readiness
Gap analysis, remediation plan, policies and procedures, and support all the way to the certification audit.
NIS2 and DORA
We work out what each regulation requires of you given your sector and size, and turn it into concrete measures and evidence.
Risk analysis and security master plan
Asset inventory, risk analysis using a recognised methodology and a prioritised, costed security master plan.
Virtual CISO
A part-time security lead who runs the programme, reports to the board and coordinates your team and your suppliers.
Technical audit and pentesting
We review your infrastructure, applications and configuration, and simulate real attacks to measure your exposure.
Continuity and incident response
Continuity and incident response plans you can actually run, tested with tabletop exercises.
Technology audit and due diligence
An independent technical view when an important decision is at stake.
Technology due diligence
For acquisitions or investment rounds: the real state of the technology, security, technical debt and team.
Supplier and third-party audits
We assess the security and technical capability of the suppliers that handle your data or critical systems.
Technical second opinion
We review projects that are late or off track and tell you what is going on and how to get them back on course.
Strategic advice
Technology decisions made on technical grounds, not commercial ones.
Supplier selection
We define the requirements, compare alternatives and review contracts and SLAs from a technical standpoint.
Technology roadmap
Where you are, where you want to be and what to invest in first: infrastructure, cloud, security and data.
AI Act compliance
Inventory and classification of your AI systems, your obligations under the AI Act and the governance controls to meet them.
Situations where we usually help
A client or the public sector requires ENS or ISO 27001
We tell you how far you are, what to do in which order, and support you through to certification.
You are not sure whether NIS2 or DORA apply to you
We assess it against your activity and size and, if they do, prepare the plan to comply.
You are about to buy or invest in a company
We review its technology and security before you sign, so you know what you are buying.
A technology project is stuck
An external, independent view to understand the problem and propose how to get it back on track.
From assessment to results
Projects with scope, timelines and deliverables agreed from the start.
- 01
Assessment
Interviews and a review of documentation and systems to understand your starting point.
- 02
Proposal
Scope, timelines, deliverables and budget fixed before we begin.
- 03
Delivery
We work alongside your team, with regular reviews and no surprises.
- 04
Follow-up
We support you through implementation and, if you need it, ongoing maintenance.
What we are often asked
How long does it take to achieve ENS or ISO 27001?
It depends on your starting point and the scope. In the initial assessment we give you a realistic estimate and a timeline.
Do you also carry out the certification audit?
No. Certification is issued by an independent accredited body. We prepare you and support you during the audit.
Do you work with small companies?
Yes. We tailor the scope and documentation to the size of the organisation; the same plan makes no sense for twenty people and for two thousand.
Can you implement the measures as well as recommend them?
Yes. Besides consulting, we provide managed cloud, managed security and training, so we can carry out the plan if you prefer.
Have a project in mind?
Tell us about your situation and we will propose a concrete scope, with no obligation.