Diensten

01 · Entry diagnostics & strategic triage

Diagnose / acquire

• [C] Compliance health check with evidence-based gap register
• [C] Regulatory applicability scan by industry and activities
• [C] Market-access barriers and buyer-requirements diagnostic
• [C] Management-system maturity assessment
• [C] Operational bottleneck and process-friction assessment
• [C] Customer / regulator / certification obligations map
• [C] Compliance cost, exposure and remediation business case
• [C] 90-day prioritised improvement and assurance roadmap

02 · ISO 9001 quality management

Build / operate

• [C] ISO 9001 gap analysis and implementation roadmap
• [C] QMS design with governance and policy architecture
• [C] End-to-end process mapping and SIPOC documentation
• [C] Quality objectives, leading KPIs and dashboard design
• [C] Nonconformity, root-cause and corrective-action workflow
• [C] Customer complaints, feedback and satisfaction system
• [C] Quality internal audit planning and execution
• [C] Management review design, facilitation and follow-up

03 · Integrated management systems (IMS)

Build / operate

• [C] Single governance chassis across ISO 9001 / 27001 / 14001 / 45001 / 22301 / 42001
• [C] Shared document-control and records architecture
• [C] Cross-standard requirement and control mapping
• [C] One risk-and-opportunity register with domain annexes
• [C] Integrated internal audit programme
• [C] Unified management review and assurance pack
• [C] Multi-site and multi-entity management-system rollout
• [C] Post-acquisition consolidation of separate management systems

04 · Information security & ISO/IEC 27001

Build / operate

• [C] ISMS gap assessment and scoped certification readiness
• [C] Information asset inventory and classification governance
• [C] Information-security risk assessment and treatment planning
• [C] Statement of Applicability and control-evidence design
• [C] Information-security policies and access lifecycle workflows
• [S] Microsoft 365 / Azure security baseline implementation
• [S] Supplier security assessment and cloud shared-responsibility review
• [S] Technical security verification via specialist testing partners

05 · Privacy, data protection & information governance

Build / operate

• [S] GDPR data-processing inventory and records of processing
• [S] Privacy notices and controller/processor-role mapping
• [S] DPIA methodology and assessment facilitation
• [S] Data retention, deletion and subject-rights workflows
• [S] Processor agreements and cross-border transfer review
• [S] Privacy-by-design project and product assessment
• [S] ISO/IEC 27701 privacy information management implementation
• [S] Outsourced privacy officer / DPO support where qualified

06 · Responsible AI & ISO/IEC 42001

Build / operate

• [C] AI use-case inventory and shadow-AI discovery
• [S] EU AI Act role and obligations applicability mapping
• [C] AI governance policy, approvals and accountability matrix
• [C] ISO/IEC 42001 AIMS gap analysis and implementation
• [S] AI impact assessment and fundamental-rights risk review
• [S] Third-party AI model / vendor due diligence
• [S] AI model monitoring, human oversight and incident workflow
• [S] Independent AI security or red-team exercises with specialists

07 · Business continuity, resilience & cyber obligations

Build / defend

• [C] Business impact analysis and critical-process dependency map
• [C] ISO 22301 BCMS implementation and programme governance
• [C] Business continuity and crisis response plans
• [S] Disaster recovery strategy and restore-testing coordination
• [C] Continuity tabletop exercises and lessons-learned register
• [S] NIS2 / Dutch cyber-law applicability and readiness assessment
• [S] DORA readiness and ICT third-party resilience review
• [S] Cyber incident response playbook and notification decision support

08 · Enterprise risk, governance & internal control

Build / operate

• [C] Enterprise risk assessment with risk appetite and ownership
• [C] Board governance calendar, delegations and reporting lines
• [C] Three-lines model and control-owner responsibility design
• [C] Internal control register, testing plan and evidence trail
• [C] Ethics, conflicts of interest and whistleblowing procedure
• [C] Third-party anti-bribery and corruption control programme
• [C] Management information, KPI cascade and strategic alignment
• [S] Fraud risk assessment and specialist forensic referral

09 · Workplace safety, HSE & ISO 45001

Build / operate

• [S] Occupational safety and ISO 45001 gap analysis
• [S] RI&E coordination with qualified occupational-safety experts
• [S] Plan van aanpak and safety measure follow-up
• [S] Toolbox talks and safety communication programme
• [S] Contractor and visitor safety induction design
• [S] Near-miss, injury and incident reporting process
• [S] Workplace violence and psychosocial hazard policy assessment
• [S] Safety leadership, behaviour observation and field audits

10 · Physical security, aggression & defensive capability

Build / operate

• [S] Workplace aggression exposure assessment and response protocol
• [S] De-escalation training for public-facing staff
• [S] Conflict communication and verbal boundary-setting workshops
• [S] Personal safety and controlled disengagement sessions
• [S] Security-team scenario design and supervised role play
• [S] Facility security and access-control process assessment
• [S] Specialist physical training actors for security and public agencies
• [S] Professional defensive skills curriculum with qualified partner academy

11 · Environmental management, energy & ESG

Build / operate

• [S] ISO 14001 environmental-management readiness and rollout
• [S] Environmental aspects and impacts register
• [S] Environmental permit and compliance-obligations inventory
• [S] Energy consumption baseline and reduction programme
• [S] Supplier sustainability questionnaire and evidence support
• [S] Waste management and circularity process improvement
• [S] CSRD / ESRS applicability and reporting-readiness assessment
• [S] Sustainability claims substantiation and greenwashing-risk review

12 · Product, industrial & sector-specific compliance

Build / access

• [S] CE marking applicability and technical-file coordination
• [S] Machinery safety and conformity assessment coordination
• [S] Product traceability and recall-readiness programme
• [S] Medical device QMS / ISO 13485 partner-led preparation
• [S] Food safety HACCP / ISO 22000 partner-led programme
• [S] Automotive supplier quality / IATF 16949 partner-led readiness
• [S] Data-centre compliance and customer assurance review
• [S] Construction / industrial client prequalification documentation

13 · Supplier, subcontractor & third-party risk

Operate / access

• [C] Supplier prequalification and onboarding workflow
• [C] Vendor risk segmentation and due diligence questionnaires
• [C] Supplier quality audit and improvement follow-up
• [S] Critical supplier cyber/privacy assessment
• [C] Supplier contract-obligation register and renewal tracker
• [C] Business continuity dependencies and alternative-sourcing assessment
• [C] Supply-chain compliance evidence packs for buyers
• [S] Sanctions, beneficial ownership and integrity checks with specialists

14 · Assurance, audits & certification readiness

Operate / renew

• [C] ISO 9001 / 27001 internal audits within competence and independence limits
• [C] Integrated internal audit outsourcing
• [C] Pre-certification mock audit and evidence room preparation
• [C] Corrective-action closure and effectiveness verification
• [C] Surveillance and recertification preparation
• [C] Customer / second-party audit readiness
• [C] Evidence sampling, control testing and audit trail design
• [S] Independent statutory or certification assurance via authorized bodies

15 · Public procurement & tender readiness

Access / grow

• [C] Tender opportunity monitoring and bid/no-bid screening
• [C] Tender eligibility, exclusion grounds and suitability review
• [C] Selection-criteria and evidence-gap assessment
• [C] Bid library, references, CVs and certification evidence development
• [C] Tender response coordination and submission quality control
• [C] EMVI / BPKV narrative and measurable value proposition development
• [S] Procurement-law compliance and objections via legal partner
• [C] Post-award mobilization, contract obligations and supplier performance

16 · Market access & B2B commercial development

Access / grow

• [C] Industry and account opportunity mapping
• [C] Key account stakeholder and decision-making-unit mapping
• [C] Market entry positioning and buyer-requirements translation
• [C] Partner, distributor and channel identification
• [C] Sales qualification and business case design
• [C] Commercial proposal, pitch and value communication support
• [C] Strategic alliance and partnership negotiation support
• [C] Outsourced market development / origination mandate

17 · International trade & cross-border entry

Access / grow

• [S] New-country regulatory entry and license requirement scan
• [S] Import/export process and customs-documentation support
• [S] Product standards and destination-market conformity mapping
• [S] Sanctions and restricted-party screening programme
• [S] Incoterms and logistics allocation review with trade specialists
• [S] Overseas supplier/distributor due diligence
• [S] Cross-border contracts, jurisdiction and dispute-clause review with counsel
• [C] Foreign market partner sourcing and commercial introductions

18 · Contract operations & corporate legal support

Transact / operate

• [C] Contract lifecycle management implementation
• [C] Contract obligation and deadline extraction register
• [C] Commercial contract intake and approval workflow
• [S] Terms and conditions review with qualified legal counsel
• [S] Shareholder agreements and governance documentation with counsel
• [S] Corporate reorganization documentation with counsel/notary
• [S] IP ownership, licensing and confidentiality issue spotting
• [S] Privacy, liability, insurance and indemnity review coordination

19 · Permits, regulatory proceedings & disputes

Access / defend

• [C] Permit application requirements and evidence dossier coordination
• [C] Inspection-readiness and regulator correspondence tracking
• [S] Administrative-law objections and appeals with qualified counsel
• [S] Tender challenge and procurement remedies with counsel
• [S] Competition-law and abuse-of-dominance issue assessment with counsel
• [S] Regulatory enforcement response and remediation plan support
• [S] Commercial dispute evidence organization and chronology building
• [S] Mediation, settlement and claim strategy coordination with counsel

20 · M&A, valuation, succession & transactions

Transact / exit

• [C] Acquisition readiness and operational sell-side preparation
• [C] Vendor due diligence document room and disclosure coordination
• [S] Commercial due diligence and customer concentration analysis
• [S] Quality-of-earnings and normalized EBITDA review with finance specialists
• [F] Business valuation report and scenario analysis through qualified valuator
• [S] Transaction structuring, SPA and warranties with lawyers / tax advisers
• [S] Post-merger integration and unified compliance workstream
• [S] Succession, management buyout and shareholder transition advisory

21 · Capital access, finance & restructuring

Grow / defend

• [C] Funding-readiness information memorandum support
• [S] Bank debt and acquisition-financing package preparation
• [S] Working-capital and cash conversion diagnostic
• [S] Distress early warning, turnaround and recovery programme
• [S] Debt covenant monitoring and lender reporting controls
• [S] Subsidy and grant eligibility scan with specialist partners
• [F] Regulated investment advice or discretionary management via licensed firm
• [S] Restructuring / insolvency legal and tax coordination with experts

22 · Process transformation & operational excellence

Build / improve

• [C] Lean value-stream mapping and waste elimination
• [C] Process ownership, RACI and handoff redesign
• [C] Root-cause analysis and recurring-problem elimination
• [C] Operational KPI system and management cadence
• [C] Internal customer friction and employee-led improvement discovery
• [C] SOP simplification and frontline workflow redesign
• [C] Change management and adoption measurement
• [C] Improvement business cases and benefits realization tracking

23 · Workflow automation, software & data products

Build / scale

• [C] Compliance process digitization and no-code workflow design
• [C] Automated evidence capture and control reminder workflows
• [C] Requirements-to-controls mapping knowledge base
• [C] Supplier and customer audit portal specification
• [C] Management dashboards and compliance analytics
• [S] Secure system integrations and access reviews via technical partners
• [F] Subscription compliance / market-access software platform
• [F] Self-service audit readiness and tender response product

24 · Training, education & capability development

Build / operate

• [C] Management-system onboarding and awareness sessions
• [C] Internal auditor and process-owner coaching
• [C] ISO implementation workshops for management teams
• [S] Privacy and information security behavior training
• [S] AI governance and approved-use training
• [S] Physical resilience and aggression training with certified partners
• [S] Scenario-based role-player training for high-risk professions
• [S] Specialized accredited certifications through approved training partners

25 · Fractional leadership, retainers & managed services

Operate / renew

• [C] Fractional QHSE / compliance manager retainer within competence
• [C] Outsourced management-system office and control owner tracking
• [C] Monthly regulatory horizon scanning and obligation updates
• [C] Quarterly board risk and performance reporting
• [C] Vendor/tender compliance evidence subscription
• [S] Fractional CISO or security lead via competent specialist
• [S] External privacy/DPO service via eligible professional
• [C] Annual audit, training and recertification programme management

ISO 9001 and quality

• ISO 9001 certificering hulp
• ISO 9001 consultant
• ISO 9001 implementatie uitbesteden
• kwaliteitsmanagementsysteem opzetten
• ISO 9001 certificering kosten
• ISO 9001 gap analyse
• ISO 9001 handboek opstellen
• ISO 9001 interne audit
• ISO 9001:2026 overgang
• ISO 9001 2015 naar 2026
• ISO 9001:2026 transitieplan
• ISO 9001 hercertificering hulp

ISO 27001 and information security

• ISO 27001 implementatie
• ISO 27001 consultant inhuren
• ISO 27001 certificering begeleiding
• ISO 27001 gap analyse
• ISO 27001 kosten mkb
• ISMS opzetten
• ISO 27001 risicoanalyse
• ISO 27001 SoA opstellen
• ISO 27001 interne audit uitbesteden
• ISO 27001 voor SaaS bedrijf
• ISO 27001 voor MSP
• ISO 27001 certificaat nodig voor klant

KAM, QHSE, arbo and environment

• KAM systeem opzetten
• KAM manager extern
• QHSE consultant
• KAM handboek opstellen
• integraal managementsysteem ISO
• ISO 14001 certificering begeleiding
• ISO 45001 implementatie
• RI&E laten uitvoeren
• VCA certificering hulp
• Safety Culture Ladder begeleiding
• milieuaspectenregister
• veiligheidsbeleid opstellen

NIS2 and the Cyberbeveiligingswet

• NIS2 consultant Nederland
• NIS2 gap analyse
• NIS2 verplicht voor mijn bedrijf
• Cyberbeveiligingswet advies
• NIS2 zorgplicht maatregelen
• NIS2 registratie entiteitenregister
• NIS2 leveranciersbeveiliging
• NIS2 audit voorbereiding
• NIS2 toeleverancier verplichtingen
• Wwke risicoanalyse
• Wwke weerbaarheidsplan

Privacy and AVG

• AVG compliance advies
• AVG audit bedrijf
• privacy officer inhuren
• DPO as a service
• externe functionaris gegevensbescherming
• AVG verwerkingsregister opstellen
• verwerkersovereenkomst opstellen
• DPIA laten uitvoeren
• AVG datalekprocedure
• AVG privacy risicoanalyse
• AVG cameratoezicht werknemers

AI Act and ISO 42001

• AI Act compliance consultant
• AI Act gap analyse
• AI Act risico classificatie
• AI beleid bedrijf opstellen
• AI governance framework
• AI register bedrijf
• ISO 42001 implementatie
• ISO 42001 certificering begeleiding
• AI literacy training
• AI leveranciers due diligence
• shadow AI inventarisatie

DORA and resilience

• DORA gap analyse
• DORA compliance consultant
• DORA ICT risicoanalyse
• DORA leveranciersrisico
• DORA register of information
• DORA internal audit
• ISO 22301 implementatie
• business impact analyse
• bedrijfscontinuïteitsplan opstellen
• crisismanagement oefening
• disaster recovery plan

Audits and external expertise

• interne auditor inhuren
• ISO audit uitbesteden
• externe ISO auditor
• ISO 9001 lead auditor freelance
• ISO 27001 lead auditor freelance
• klantaudit voorbereiding
• surveillance audit voorbereiden
• leveranciersaudit uitvoeren
• auditbevindingen oplossen
• non conformiteit oplossen
• CAPA systeem opzetten

Outsourced roles

• externe compliance officer
• compliance manager inhuren
• CISO as a service
• privacy officer interim
• KAM manager detachering
• kwaliteitsmanager interim
• QHSE manager interim
• ISO implementatiemanager
• contractmanager inhuren
• tendermanager tijdelijk
• audit capaciteit tijdelijk

Tendering and market access

• aanbesteding inschrijven hulp
• TenderNed inschrijving hulp
• tender schrijven uitbesteden
• EMVI plan schrijven
• BPKV plan schrijven
• UEA invullen hulp
• geschiktheidseisen aanbesteding
• ISO 9001 voor aanbesteding
• prekwalificatie grote opdrachtgever
• preferred supplier worden
• tender readiness scan

Supplier qualification

• leveranciersbeoordeling uitvoeren
• supplier due diligence
• supplier risk assessment
• leveranciersmanagement opzetten
• security questionnaire invullen
• vendor onboarding compliance
• leverancierskwalificatie grote klant
• ISO certificaat leverancier controleren
• leveranciersaudit uitbesteden

Documents, registers and controls

• risicoregister opstellen
• compliance register maken
• wettelijke eisen register
• stakeholderanalyse ISO 9001
• contextanalyse ISO
• kwaliteitsbeleid schrijven
• informatiebeveiligingsbeleid opstellen
• SIPOC procesanalyse
• RACI matrix opstellen
• werkinstructies opstellen
• procedure documentbeheer
• leveranciersbeoordelingsformulier
• management review verslag

Process improvement and automation

• processen in kaart brengen bedrijf
• procesoptimalisatie consultant mkb
• workflow automatisering bedrijf
• compliance automatisering
• audit evidence automatiseren
• ISO management dashboard
• KPI dashboard bedrijf
• Lean procesanalyse
• AI workflow consultant
• n8n automatisering consultant
• ISO documentbeheer automatiseren

Industry and location

• ISO 9001 voor productiebedrijf
• ISO 9001 voor beveiligingsbedrijf
• ISO 27001 voor IT dienstverlener
• NIS2 voor datacenter
• KAM technische installateur
• leverancierskwalificatie OEM
• compliance audit high tech maakindustrie
• ISO consultant Eindhoven
• ISO 27001 consultant Veldhoven
• QHSE consultant Brainport