Cybersecurity consulting for SMEs — fast, fixed‑scope outcomes

We help mid‑market teams meet buyer and regulator expectations (NIST CSF, NIS2, DORA) without buying new tools.

Book a 20‑minute readiness call See packages & pricing

Productized services

NIST CSF 2.0 Essentials

4–6 weeks to stand up a risk register, policy set, incident plan, and metrics you can run.

From €9.5k (EU, ex‑VAT) / $12k (US)

Learn more

NIS2 Essentials & DORA Lite

EU readiness for incident reporting, supplier risk, and DORA‑aware contracts & registers.

From €14k (EU, ex‑VAT) / $16k (US)

Learn more

vCISO Retainers

Quarterly risk reviews, KPIs, board reporting, and supplier oversight in light monthly packages.

€2.5k–€7.5k/mo (EU, ex‑VAT) • $4k–$10k/mo (US)

Learn more

Why ETEMAS

Founder‑led delivery with clear outcomes and fixed fees
EU/US regulatory fluency (NIS2, DORA, FTC/PCI/CMMC)
Documentation you own — registers, workflows, and playbooks

How it works

1) Discover

We run a 60–90 minute discovery and a light gap analysis against your buyer/regulator expectations (NIST CSF, NIS2/DORA). You’ll get a clear, prioritized list of actions.

2) Execute

In 4–10 weeks (scope-dependent), we stand up the essentials: risk register, policy set, incident workflow, supplier due diligence, and tangible templates your team can run.

3) Handover

We hand over everything you own (docs, registers, runbooks) with KPIs and a simple cadence. Add a light vCISO retainer to keep momentum and pass reviews with confidence.