Protect · Compliance

Compliance that holds up in an audit, not just on paper.

Regulation now puts cyber security on the board's agenda. NIS2 makes management accountable. DORA requires financial entities to manage ICT third-party risk. Both demand evidence, not intentions. Because we run the technology as well as advise on it, we close the gap between the policy and what's actually configured.

Talk to an Expert How Pricing Works

Nostra helps Irish organisations meet NIS2, DORA, ISO 27001 and GDPR requirements. Our approach combines gap assessments, policy and governance support, technical controls and ongoing managed compliance. We're ISO 27001:2022 certified ourselves, and as an ICT provider to financial entities we meet DORA obligations directly.

What's Included

Compliance with Nostra

Gap assessment against the framework, with a prioritised roadmap
Policies, procedures and risk registers
Technical controls implemented and monitored
Incident response and reporting procedures
Supplier and third-party risk management
Audit preparation and evidence packs
Managed compliance: monthly oversight, reporting and regulatory updates

The frameworks we cover

NIS2 Compliance

Are you an essential or important entity? We scope your exposure, run the gap analysis, implement controls, train management and prepare incident reporting.

DORA for Financial Services

DORA-ready ICT services for credit unions and financial entities: contract clauses, register of information support, due diligence packs and resilience testing.

ISO 27001 Readiness

From someone who's done it — we've held ISO 27001 since 2021. ISMS design, Statement of Applicability, internal audit and certification support.

GDPR & Data Protection

Technical and organisational measures that stand up: data mapping, DLP, Microsoft Purview and breach procedures.

FAQs

Compliance — frequently asked questions

Does NIS2 apply to my business?

NIS2 dramatically widens the net — many medium-sized businesses in energy, transport, health, digital services and manufacturing are now in scope, plus their suppliers. We'll assess your exposure.

What is DORA?

The EU's Digital Operational Resilience Act for financial entities — including credit unions — covering ICT risk management, incident reporting and third-party risk.

Can you help us achieve ISO 27001?

Yes — from gap analysis through control implementation to audit support. We've held the certification ourselves since 2021, so the advice comes from experience.