How long does ISO 27001 certification take?

It depends on the starting point. At a unicorn-status crypto business Thomas Kranz built an information security management system from nothing and the company reached ISO 27001 certification in two months. At a blockchain fintech, ISO 27001:2022 certification came within the first three months.

What does a virtual CISO do?

A virtual or fractional CISO provides senior security leadership without the cost of a full-time executive, including security strategy, risk management, board reporting, supplier and regulator management, and leading certifications such as ISO 27001.

Can you help with DORA, MiCA or NIS2?

Yes. Thomas Kranz has built a single roadmap covering MiCA, DORA, NIS2 and MiFID II for a Europe-wide crypto fintech, and delivered MiCA and DORA registration and NIS2-ready incident management for a blockchain fintech.

Security strategy and breach response advice for a fast-growing smart charging company

Sector: Automotive and clean energy technology
Market verticals: Electric vehicle charging, smart energy, IoT, high-growth scale-up
Client: A high-growth smart charging company
My role: Security Strategy Consultant
Period: 2021

The challenge

A fast-growing smart charging company, valued well into nine figures, had grown quickly and needed a security strategy that matched its size, while dealing with data privacy law, IT audits and the hiring of the right people.

What I did

I established the security strategy and roadmaps for the leadership team. I guided the CTO and Head of Security on data privacy legal compliance, IT audits and hiring policies. When the company suffered a major security breach, I advised the executive team on how to respond.

The result

A clear security strategy and roadmap for the leadership team
Better preparedness on privacy compliance, audit and security hiring
Calm, experienced guidance for executives during a serious live incident

What clients said

“Tom is one of the most technically accomplished people I have worked with in my career. He combines an inability to walk away from unsolved problems with great technical depth and a dry wit second to none.”

— CTO

“What I really like about working with Tom is that compared to other contractors, he is quite willing to share and educate those around him. He is also very good at unraveling a complex problem with interdependent pieces and proposing practical step-wise solutions.”

— CTO