Security governance
Fractional CISO, security policy, governance committees and reporting to management bodies.
Cybersecurity consulting · Governance, risk and compliance
Cyber compliance, managed serenely.
Wizenya helps executives and security leaders in Belgium and Luxembourg structure their governance, master their risks and meet the requirements of NIS2, DORA, ISO 27001 and the GDPR. With method, without jargon or overload.
- NIS2
- DORA
- ISO/IEC 27001
- GDPR
- SOC 2
Progress serenely
We support
- NIS2 entitiesessential and important entities in Belgium and Luxembourg
- The financial sectorbanks, insurers, payment institutions and their ICT providers subject to DORA
- SMEs and mid-sized companiesaiming for ISO 27001 or SOC 2 to reassure their clients
Services
Four levers to build maturity
Every engagement starts from your business stakes and deadlines, never from a one-size-fits-all template. You stay in control, we bring the method.
Risk management
Risk assessment based on ISO 27005 or EBIOS RM, treatment plan and third-party risk management.
Compliance
Gap analysis and roadmap for NIS2, DORA, ISO 27001, SOC 2 and the GDPR, all the way to the evidence expected.
Audit and certification
ISO 27001 internal audits, certification readiness and support during external audits.
Approach
A clear approach, in four steps
A proven framework, adjusted to your size and maturity. At every step, deliverables your management can read.
-
01
Assessment
Current state, gap analysis and priorities agreed with management.
-
02
Roadmap
A realistic, costed action plan aligned with your regulatory deadlines.
-
03
Implementation
Policies, processes and evidence, built with your teams to last.
-
04
Steering
Indicators, management review and continuous improvement, up to the audit.
Regulatory milestones
Your deadlines, made clear
The NIS2 and DORA milestones shaping the agenda of Belgian and Luxembourg organisations.
-
Belgium · NIS2In force
The NIS2 law enters into force. The CCB supervises essential and important entities.
-
European Union · DORAIn force
DORA applies to financial entities: ICT risk, incidents, resilience testing and third-party providers.
-
Belgium · NIS2Passed
Essential entities demonstrate their compliance path to the CCB: CyberFundamentals, ISO 27001 or inspection.
-
Luxembourg · NIS2In force
The NIS2 law enters into force, supervised by the ILR, and by the CSSF for financial entities.
-
Luxembourg · NIS2Passed
Deadline for in-scope entities to self-register with their competent authority.
-
Belgium · NIS2Next deadline
ISO 27001 certification expected for essential entities that chose this path.
Prepare for this deadline
Sources: Centre for Cybersecurity Belgium (CCB), Luxembourg law transposing NIS2, Regulation (EU) 2022/2554 (DORA). Milestones as of 9 October 2026, to be confirmed for your situation.
About
Field expertise, for your peace of mind
Founded in Belgium in 2019, Wizenya draws on hands-on experience of the security function from the inside: banking, insurance, healthcare and the public sector, in Belgium and Luxembourg.
- Ongoing relations with regulators: CSSF, NBB, CCB
- Internal, external and certification audits
- Reporting to executive committees
- Cyber crisis management
Clarity
Deliverables your management can read, without needless jargon.
Rigour
A method aligned with standards and auditors’ expectations.
Serenity
Long-term support, at your own pace.
Contact
Let’s talk about your next deadline
An initial conversation, with no commitment, to clarify your obligations and priorities.
- contact@wizenya.com
- Erquelinnes, Belgium
- Engagements in Belgium and Luxembourg, in French and English