Kit Consulting

Cybersecurity advisory (basic)

Understand your company’s real risks, get ready for an incident and set a security strategy that fits you, guided by an ENS-certified company.

Get a quote → We are an accredited digitalisation agent

Kit Consulting cybersecurity: protect your SME

A fraudulent email, a reused password or an unpatched computer is all it takes to bring a business to a standstill. The Kit Consulting cybersecurity advisory service (basic) assesses where you stand against these risks and helps you get security in order: what to protect first, how to react if something happens and which regulatory obligations you need to meet.

It’s the ideal starting point for SMEs that have never carried out a risk analysis or have no written security policies.

What basic cybersecurity advisory includes

Based on the official Kit Consulting catalogue.

  • Understanding your SME’s current exposure to risk.
  • Measures to ensure business continuity in the event of security incidents.
  • A detailed response plan for security breaches.
  • A tailored cybersecurity strategy, defined together with you.
  • Guidance on complying with data protection and information security regulations.
  • Basic documentation for implementing an Information Security Management System (ISMS).
  • Developing a use case and identifying AI opportunities in cybersecurity.

How we do it

An orderly process, without scaremongering and with clear priorities.

  1. 01

    Inventory

    We identify devices, servers, applications, data and cloud services.

  2. 02

    Risk analysis

    We weigh up threats, vulnerabilities and impact to know what to protect first.

  3. 03

    Response plan

    We set out what to do, who does it and who to notify if an incident occurs.

  4. 04

    Policies and ISMS

    We prepare the basic documentation: policies, backups, access control, device use.

  5. 05

    Use case

    We apply a real improvement, such as two-factor authentication or a backup restore test.

Security advisers who practise what they preach

OnClick is certified under Spain’s National Security Framework (ENS). We know from our own experience what it means to put policies, procedures and controls in place in a real company.

Once the advisory work is done, you can strengthen your protection with our cybersecurity solution or, if you need technical testing, with advanced cybersecurity advisory.

  • An ENS-certified company
  • Priorities based on real risk
  • Documentation ready to use
  • Plain language, no jargon

Current Kit Consulting conditions

Programme amounts, requirements and deadlines depend on the Red.es call. Ask us and we’ll explain the current situation.

Frequently asked questions

What is an ISMS?

An Information Security Management System: the set of policies, procedures and controls a company uses to protect its information in an orderly way and improve it over time.

Is it suitable for small businesses?

Yes. It’s precisely the entry-level service for SMEs that want to know where they stand and what to do first, without major investment.

Does it include penetration testing?

No. Penetration testing and vulnerability analysis are part of the advanced cybersecurity service.

Will it help me comply with the GDPR?

It guides you on the security measures data protection law requires, although it doesn’t replace specialist legal advice.

What happens after the basic service?

You’ll have a clear picture of your risks and a prioritised plan. From there you can apply the measures yourself, move on to advanced cybersecurity advisory or work towards an ISO 27001 or ENS certification.

Let's talk about your project

Tell us what you need and we'll get back to you within 24 business hours, no strings attached.

Message us on WhatsApp