Compliance you can feel day to day, not just in the report
Real auditor’s rigor
We were born from the experience of a practicing auditor in the financial sector, where the highest standard of rigor in risk and cybersecurity is applied every day. We bring that same rigor to every project, whatever the size of your company.
A team tailored to your project
We combine an in-house core team with a network of collaborating specialists in physical security, identity and access, cryptography, or human resources. We only bring in the profile your project actually needs.
A roadmap, not just another PDF
Every deliverable includes concrete, prioritized, realistic actions for your organization. No generic recommendations that never get applied.
Ready for the official audit
We get you ready for an accredited certification body to issue your certification, with no last-minute surprises.
What we do
Risk, compliance, and security consulting services
Audit and Regulatory Compliance
Gap analysis and diagnosis against ISO 27001, ENS, NIS2, ISO 22301, and other standards
Preparation for the official certification audit
Internal and supplier audits
Business Continuity and Resilience
Business Impact Analysis (BIA)
Business continuity and disaster recovery plans (BCP / DRP)
Design and execution of tests and drills
Risk Management
Risk identification, analysis, and assessment
Risk maps and registers
Supplier and third-party risk management
Information Security
Access control and identity management (IAM)
Cryptography and information protection
Physical security: access control, data centers, and perimeter
Training and Awareness
HR security: onboarding, offboarding, and training
Training programs tailored to each profile
Phishing simulations and hands-on exercises
Security culture across the whole organization
CISO / DPO as a Service
Outsourced security officer or data protection officer role
Ongoing support, without the cost of a full-time hire
A single point of contact for auditors, clients, and authorities
How we work
A clear process, start to finish
01
Diagnosis
We analyze your current situation and identify the real gaps against the framework you’re interested in.
02
Action plan
We design a prioritized, realistic roadmap, tailored to your size and sector.
03
Implementation
We support you through rollout, with our team, yours, or a combination of both.
04
Ongoing follow-up
We review periodically so compliance becomes part of how your company works, not a one-off event.
MARC SABATER
Founder, Aurisk Consulting
Risk and cybersecurity auditor
About us
After nearly a decade in the industry, Aurisk Consulting was born from Marc Sabater’s experience as a risk and cybersecurity auditor in the financial sector, where he reviews supplier and third-party compliance daily under the market’s most demanding standards. That same practical, no-shortcuts approach is what we apply to every consulting project.
We work with a flexible model: an in-house core team for audit, risk, and compliance, and a network of collaborating specialists for the disciplines each project calls for, such as physical security, identity and access, cryptography, or human resources. That way, every client gets exactly the profile they need, without the overhead of a fixed team.
Frequently Asked Questions
Find answers to commonly asked questions about our products and services.
We work mainly with SMEs and mid-sized organizations that need to comply with risk and security regulations without having a dedicated in-house department.
We prepare you for the certification audit, but the certificate is always issued by an accredited, independent certification body, as is the case for any serious certification process.
It depends on the scope, the regulation, and your organization’s starting point. In the initial diagnosis, we give you a realistic timeline before we begin.
Yes. Each service can be hired independently or as part of a broader compliance plan.
Reach out through the contact form or at info@aurisk.io and tell us where you stand. We’ll carry out a final review to confirm you truly meet what’s required, and if everything checks out, we’ll help you choose and coordinate with an accredited certification body to carry out the official certification audit.
Ready to take the next step?
Tell us about your situation and which regulation or risk you need help with. We’ll reply in under 48 hours.
Contact us
On the call, we get to understand your situation and your goals, whether that’s preparing for a certification, strengthening risk management, rolling out a business continuity plan, or covering any other security or compliance need. From there, we propose the approach and the team best suited to your project.
We identify what your organization actually needs, without assuming anything.
We propose a work plan tailored to your size, sector, and priorities.
We bring in the right profile for your project, whether from our own team or our network of collaborating specialists.
Follow Us:
The form has been submitted successfully!
There has been some error while submitting the form. Please verify all form fields again.
By submitting this form, you agree that we may use your details to respond to your request.
