2019 |
Internal audit |
Review of international logistics' company for compliance and efficiency, incl IT (and pen-testing), accounting, legal. Fieldwork in 6 countries. 50+ recommendations |
2020 |
Consultation |
Business strategy review and improvement for an institution in telecommunication sector. |
2020 |
IT audit |
Review of medical sector's institution's IT development compliance with EU regulations. Fieldwork in 4 different companies (pharmacies, wholesalers). |
2020 |
Internal audit |
Review of electrical utility's continuity plan compliance with regulations. 50+ recommendations. |
2021 |
IT audit |
Review of water utility's compliance with ISO 27001 requirements. 10+ recommendations |
2021 |
Risk analysis |
Creation of hospital IT risk registry in compliance with E-ITS (ISO 27001 derivate for Estonia). Mapping of ca 800 risks, 250+ recommendations. |
2021 |
IT audit |
Review of telecommunication company's state of play with Cyber Risks handling and SecDevOp process. 5+ recommendations. |
2021 |
Internal audit |
Assessment for financial sector's company on IT Risk Management and IT Operations Management for alignment with risk appetite, compliance with regulations and efficiency of IT activities. 10+ recommendations. |
2022 |
Due Diligence |
IT due diligence for a take-over candidate - big retail. |
2022 |
Consultation |
IT governance for a complex institution in academic sector: governance system (roles, structures), strategy and policies development from scratch, inclusion of ISO 27001 principles. |
2022 |
Data analysis |
Data analysis for EU sponsored cultural sector's survey (Estonian part). |
2022 |
Consultation |
IT strategy &governance (incl organogram) to support execution of Digital Strategy for a financial institution in Pakistan.*subcontracted |
2022 |
Consultation |
Business strategy facilitation for a major public company (methodology, workshops, writing). |
2023 |
Data analysis |
Structural Funds (CF, ESF) 2014-2020 investments' performance analysis for European Commission. |
2023 |
Risk analysis |
Facility's cybersecurity risk analysis for a major utility in frames of IEC 61511 certification (cyber HAZOP (IEC 62443-2-1) - interviews, analysis, workshops, risk registry). |
2023 |
Consultation |
FMI contingency plans & strategy for a major bank for ECB compliance. |
2023 |
IT audit |
Comprehensive cybersecurity maturity assessment for a major company. |
2023 |
IT consulting |
ISMS implementation for a public institution for E-ITS compliance (ISO 27001 derivate for Estonia) - risk assessments (workshops), writing. |
2024 |
Due Diligence |
IT due diligence for a take-over candidate - IT service company. |
2024 |
Risk Management |
ISO 27005 based risk management implementation for a major government institution - methodology, proof of concept, training, risk assessment workshops. |
2024 |
IT audit |
Post-acquisition IT maturity assessment audit of an Internet technology company for a foreign buyer. |