Cybersecurity and IT leadership, without hiring a full-time CISO or IT director.

For companies in West Flanders with 50 to 250 employees. I turn NIS2 and ISO 27001 into a concrete plan, follow it through and report to your management and board. A few days a month, at a fixed price.

Book a free 30-minute intro call See how I work

Paul Vandamme, CISM. 35 years in ICT, including seven years leading IT and cybersecurity across 16 countries.

From "where do we stand?" to demonstrably in control

You know in advance what each step delivers and what it costs. After each step, you decide whether to continue.

Intro call

30 minutes, free

We check whether NIS2 applies to your company, what your customers and insurer expect, and where the biggest risks are.
Baseline

Fixed price

An assessment against the CyberFundamentals framework or ISO 27001, with interviews of management and key staff, a risk analysis and a clear list of priorities.
Plan

Approved by your management

A twelve-month plan with actions, owners and budget. Written for the people who decide, not for specialists.
Follow-up

Fixed monthly fee

I take on the Information Security Officer or IT manager role for a few days a month, track the actions and report on progress.

Three roles, one point of contact

Fractional Information Security Officer (CISO)

An experienced information security officer, without the cost of a full-time hire.

Writing the security policy and getting it approved
Tracking risks and monitoring the action plan
Reporting to management and the board
Acting as point of contact for auditors, customers and insurers

Format: fixed monthly fee, typically one to three days a month. Starts with the baseline.

NIS2, ISO 27001 and awareness

Regulation only becomes useful when it lands in your organisation. I help put the policy into practice.

Baseline against CyberFundamentals (NIS2) or ISO 27001
Guidance towards compliance or certification, including the documentation
Follow-up of action plans with your own people
Awareness sessions for staff and briefings for board members, who carry personal responsibility under NIS2

Format: fixed price per programme or per session.

Fractional IT manager or IT director

For companies that want their IT function, or part of it, led by someone who did this for years at group level.

Leading IT operations and your external partners
Supplier management and contract renegotiation
Budget and team follow-up
An IT plan aligned with your business goals

Format: fixed monthly fee, tailored to your size.

Independent, and no technical implementation

I sell no software, hardware or managed services, and I do not install or configure anything. If you need technical partners, I help you select and steer them. I build knowledge inside your organisation, so you do not become dependent on me.

At home on the shop floor, not just in the boardroom

My experience comes from companies where downtime costs money immediately.

Manufacturing and food

Production cannot stop. I bring the risks of office IT and the production environment together in one board-level plan, and help you answer the security questions your customers and supply-chain partners increasingly ask.

Transport and logistics

Your customers rely on a chain that keeps running. Continuity, agreements with partners and a workable contingency plan are central, as are the requirements NIS2 sets for the sector.

Also working with companies in chemicals, wholesale and healthcare.

Clear prices, agreed in advance

I work with fixed prices per step. You pay for a result, not for hours on a meter. What a step costs depends on your size and on what is already in place, so I name a figure once I know that.

NIS2 or ISO 27001 baseline

After a 30-minute conversation I know enough to give you a fixed price, with a clear description of what you get: interviews with management and key staff, a risk analysis, a priority list and a presentation of it to your management.

Monthly support

A fixed monthly fee, matched to your size and ambition. You know the price before we start, and the format can be adjusted monthly.

About Paul Vandamme

I have worked in ICT for 35 years and spent recent years leading IT infrastructure, IT operations and cybersecurity at group level: an international environment with sites in sixteen countries, a team of more than sixty people and an annual budget of several million euro.

What I bring is the combination that smaller organisations rarely find in one person. I understand the technology well enough to steer suppliers and internal teams, and I explain the same material to an executive committee or a board without jargon. Before that I led international IT projects and carried profit-and-loss responsibility for a services organisation.

In practice that means writing a security policy and getting it approved, setting up and monitoring a zero trust or NIS2 programme, renegotiating IT contracts, building a multi-year plan that management and finance understand, and being the point of contact for audits, insurers and customers' security questions.

I live in Ostend and work across West Flanders. I speak Dutch, French and English.

CISMCertified Information Security Manager, ISACA
PRINCE2 and ITILProject and service management
Vlerick Business SchoolMiddle Management Program
16 countries, 60+ peopleIT and cybersecurity at group level

Book an intro call

Tell me who you are and what it is about. I reply within two working days with a proposal for a 30-minute conversation, free and without obligation.