Hire an ISO 27001 Implementation Consultant
MVProjects delivers project-based cybersecurity services with a clear scope, fixed deliverables and a predictable timeline. From ISO 27001 implementations and NIS2 compliance trajectories to DORA readiness assessments, penetration tests and IAM projects. We work with fixed project prices, certified consultants and a proven methodology based on ISO, OWASP and NIST. The result: tangible deliverables, a management presentation and a concrete improvement plan.
Fixed
Project price
ISO/NIST
Certified methodology
100%
Deliverable guarantee
Incl.
Management presentation
Our Project Types
MVProjects delivers the full spectrum of cybersecurity projects. Every project is executed by certified consultants with proven experience in the specific domain.
ISO 27001 Implementation
Full implementation of an Information Security Management System (ISMS) in accordance with ISO 27001:2022. From gap analysis to certification audit preparation. Including policy framework, risk management and internal audit.
NIS2 Compliance
NIS2 directive gap analysis, roadmap and implementation. We map your current maturity level, identify the gaps and implement the measures needed for compliance before the deadline.
DORA Readiness
Digital Operational Resilience Act assessment for financial institutions. Gap analysis, ICT risk management framework, incident reporting procedures and third-party risk management implementation.
Penetration Testing
Professional penetration tests conducted by certified ethical hackers (OSCP, CEH, GPEN). Web application, infrastructure, API, red team and social engineering assessments with actionable reporting.
IAM/IGA Implementation
Identity & Access Management and Identity Governance & Administration projects. From architecture design to implementation of platforms such as SailPoint, Saviynt, Azure AD and CyberArk.
Cloud Security Assessment
Security assessment of your Azure, AWS or GCP environment. Configuration audit, compliance check (CIS Benchmarks), architecture review and roadmap for cloud-native security improvement.
GDPR Gap Analysis
GDPR compliance gap analysis, records of processing activities, DPIAs and privacy policies. Including DPO-as-a-service option for organisations seeking an external data protection officer.
Our Methodology
Every MVProjects project follows a structured methodology that ensures predictability, quality and concrete results.
Intake & Scoping
Detailed project intake to establish scope, deliverables, timeline and budget. You receive a clear Statement of Work with a fixed project price.
Assessment & Analysis
Our experts conduct a thorough analysis of the current situation: documentation review, interviews, technical scans and gap identification.
Design & Roadmap
Based on the analysis, we design the target architecture and prepare a prioritised roadmap with concrete measures and quick wins.
Implementation
Hands-on implementation of the agreed measures: policies, procedures, technical configurations, training and processes.
Validation & Testing
Validation of the implemented measures through internal audits, technical tests and simulations. We ensure everything works as designed.
Reporting & Handover
Final report with findings, recommendations and management summary. Including presentation to management/board and handover to your team.
Why MVProjects for Your Cybersecurity Project?
MVProjects distinguishes itself through the combination of deep cybersecurity expertise, a project-based approach and transparent commercial terms. We are not a generic IT consultancy that also does "something with security" — cybersecurity is our sole domain.
- Fixed project price, no surprises afterwards
- In-house team of certified cybersecurity experts
- Certified methodology (ISO, OWASP, NIST)
- Final report and management presentation included
- Ongoing support after delivery available
- NDA and confidentiality guarantee as standard
Statement of Work
Every project starts with a detailed Statement of Work in which scope, deliverables, timeline, project team and price are established. You know exactly what you will receive, when you will receive it and what it will cost.
Request a project proposalFrequently Asked Questions about Cybersecurity Projects
The costs depend on the size of your organisation, the current maturity level and the desired scope. A typical ISO 27001 implementation for a mid-sized organisation (50-250 employees) ranges from EUR 30,000 to EUR 80,000 excluding VAT. We work with fixed project prices: you know exactly what you will pay upfront. Contact us for a no-obligation project estimate.
A full ISO 27001 implementation typically takes 6 to 12 months, depending on the organisation size and current maturity. A gap analysis can be completed in 2-4 weeks. We work with clear milestones and a realistic planning that takes into account the availability of your team.
We offer both options. For clearly scoped projects (ISO 27001, NIS2 gap analysis, pentest) we prefer to work with a fixed project price based on the Statement of Work. For projects with a more fluid scope, we offer a time & materials model with a pre-agreed bandwidth. In both cases, costs are transparent and predictable.
Our consultants work according to recognised methodologies: ISO 27001/27002, NIST Cybersecurity Framework, OWASP (for penetration testing), CIS Controls, COBIT and ITIL. Our pentesters are certified (OSCP, CEH, GPEN) and our GRC consultants hold CISSP, CISM, CISA and/or ISO 27001 Lead Auditor certifications.
Yes, NIS2 compliance is one of our core projects. We offer a NIS2 gap analysis that maps your current maturity level against the NIS2 requirements. Subsequently, we prepare a prioritised roadmap and implement the required measures: risk management, incident reporting, supply chain security, business continuity and more.
Yes, after project completion we optionally offer ongoing support via a retainer model. This can range from monthly advisory sessions to a full managed security service. Many clients choose ongoing support after an ISO 27001 implementation for the internal audit cycle and continuous improvement of the ISMS.
Confidentiality is central to our service delivery. All project staff sign an NDA prior to the project. We work with secure communication channels, encrypted documents and a clean desk policy. For penetration testing, we apply strict rules for handling discovered vulnerabilities and report exclusively to the pre-designated contacts.
READY TO START YOUR CYBERSECURITY PROJECT?
Get in touch for a no-obligation project estimate. We analyse your situation and deliver a clear proposal with a fixed price and defined deliverables.
Last updated by Mathijs Visser, Co-founder and Lead Consultant MVPeople Group.