01
Assessment and tests
We review assets, access, configurations, vulnerabilities, backups and logs. We select application, network, recovery and user-resilience tests where findings may change priorities.
Security programme
Cybersecurity for businesses
We select and implement safeguards around your company's risks. The work may include audits, testing, data protection, tool configuration and ongoing maintenance. Before starting, we agree the order of tasks, who is responsible and how results will be checked.
Trusted by
Companies and institutions that need stable IT.
Where to start protecting your business
We start with critical services, data, suppliers and the current state of access, backups, vulnerabilities and logs. We involve IT, management and process owners, including personal data and customer requirements in the discussion. You can begin with an audit, test, urgent safeguard or ongoing support. The directory below helps identify a specific topic; not every company needs every service.
Choose the type of support
Assessment, implementation and ongoing operations deliver different results. We agree the scope, budget and responsibilities before work starts.
Audits and requirements
NIS2, DORA, KSB 315, TISAX, AI Act, ISO 27001 and customer questionnaires. Audits, NIS2/DORA implementation, ISMS development and upkeep, and preparation for ISO or TISAX assessment within an agreed scope.Security solutions
Selection of tools to protect devices, accounts, data and applications, along with configuration and integration. Scope is based on risk and the team's ability to maintain the solution.Ongoing IT support
Administration, helpdesk with an agreed SLA, IT monitoring and safeguard maintenance. The contract defines reviews, reporting and ticket handling.ISO 27001 · TÜV NORD Polska
TÜV NORD Polska has certified Virtline's information security management system to PN-EN ISO/IEC 27001:2023-08. Certificate AC090 121/2469/6137/2026 is valid until February 2029; the document states its scope and exact expiry date. It does not certify the client or guarantee the effectiveness of every client control.
View Virtline's certificateSecurity programme implementation process
The stages connect assessment, decisions and technical work. An urgent problem may call for a separate earlier action; timing and conditions are agreed individually.
02
Plan and ownership
We establish risks, owners, budget and dependencies. Findings become tasks for MFA, EDR, SIEM, backups, segmentation, email, VPN and privileged accounts.
03
Implementation and acceptance
We configure agreed safeguards, including IDS/IPS and firewalls, and prepare procedures. We check operation and record changes, findings and acceptance limitations.
04
Reviews and response
We agree ongoing operations, log sources, alert rules, assessment, escalation and reports. Tests and incident exercises are repeated on an agreed schedule.
Practical scope
What remains after the agreed stage
Deliverables depend on whether we assess, test or implement. We distinguish completed work, open risks and decisions that remain with the client.
Assets, critical services, suppliers, personal data, permissions, backups, devices and logs. We identify gaps and owners for further action.
Technical and organisational tasks, deadlines, dependencies and budget decisions. Urgent fixes are separated from larger process or tool changes.
Audit or test reports, logs, change records and restore results. Acceptance criteria identify what was checked and what lay outside the scope.
Reviews of access, vulnerabilities, backups, alerts and incidents. We agree log sources, escalation, management reporting, repeat tests and response exercises.
Tools do not replace responsibility
SIEM collects and correlates events, SOAR supports agreed automated actions, and SOC describes how people organise incident analysis. EDR concerns detection and response on devices; MDR is a managed threat-response service. Installing a system alone does not provide staffing or round-the-clock response. The contract defines hours, access, escalation and authority to act. An audit does not implement fixes automatically, backups cannot prevent every attack, and Virtline's certificate does not establish client compliance.
Audits and information protection
We separate gap assessment, implementing recommendations and preparation for external assessment.
-
NIS2 audit
Assets, incidents, business continuity, suppliers, security measures and a plan to address gaps.
-
DORA audit
ICT risk, critical services, incidents, suppliers, resilience testing and financial-sector documentation.
-
NIS2 implementation
Turning gaps into safeguards, procedures, responsibilities, documentation and ongoing operations.
-
ISO 27001 gap audit
Assessment of the ISMS, documentation and control practices before preparation for independent certification.
-
Dane Chronione TÜV NORD
Preparing data protection, documentation, roles and procedures for programme requirements. The service is not itself a certification decision.
Security testing
We examine the agreed scope and provide findings with remediation priorities. A penetration test identifies vulnerabilities in a selected system. Red Team exercises and threat emulation reproduce agreed adversary behaviour to assess the organisation's detection and response. Such a scenario requires separate agreement on objectives, authorisation and test boundaries; it is not automatically part of every penetration test.
-
Network audit
Segmentation, firewalls, VPN, configurations and corporate-network risks.
-
Application testing
Application penetration testing and assessment of identified vulnerabilities within an agreed scope.
-
Network testing
Penetration testing of networks and services, with agreed boundaries for the work.
-
Social engineering tests
Assessment of organisational resilience and user behaviour through agreed scenarios.
Technical safeguards
Configuration is paired with functional checks and rules for subsequent operation.
-
MFA and access
Multi-factor authentication for users, administrators, VPN and critical applications, with permission reviews.
-
EDR and device protection
Workstation and server protection, threat detection, response policies, host isolation, alert tuning and reports.
-
Backup and recovery
Retention, separated copies and restore tests. We agree acceptable data loss and recovery time (RPO/RTO), including ransomware scenarios.
-
Email Security
Anti-phishing, anti-spam and attachment protection, with SPF, DKIM and DMARC addressed separately as domain email authentication controls.
-
IDS/IPS implementation
Detection and blocking of attacks in network traffic, alerting rules, monitoring connections and response procedures.
-
Firewall implementation
Traffic rules, network address translation (NAT), VPN, segmentation, logging and Internet-facing services.
Monitoring and operating tools
System selection, configuration and day-to-day support are separately agreed tasks. Dark Web monitoring helps identify exposed business data and credentials in monitored sources. Alerts require validation and a response for affected accounts; the absence of an alert does not establish that no leak has occurred. Before selecting a solution, define the domains, sources and responsibility for handling alerts.
-
SOC, SIEM and SOAR
Log sources, correlation, alert classification, escalation, response procedures and reporting to IT and management.
-
Statlook
Inventory of hardware, software, activity and risks in user environments. Product functions do not determine an employer's right to monitor staff.
-
ESET
Selection, configuration and upkeep of protection for workstations, servers and email in the agreed product option.
Related topics and information
-
Baseline — projects and tasks
Baseline organises projects, tasks, roles and reports. Virtline configures statuses, data access, integrations and ongoing upkeep. Explore the deployment scope.
-
IT security services
We help plan and implement IT safeguards against information leaks, cyberattacks, social engineering and system downtime.
Questions about cybersecurity services
Do we need the whole programme?
+
No. You can begin with a selected audit, test, safeguard or support service. We agree scope based on risk, the environment and budget. NIS2, DORA, GDPR, ISO 27001 or customer requirements must be considered for the particular organisation; purchasing a service does not establish compliance automatically.
What do you check in everyday operations?
+
We review password policies, changes after compromise and privileged accounts. Device updates are assessed according to risk. We check recovery tests against data-loss and recovery-time objectives, log completeness and their usefulness during incidents.
How do we choose security measures for our business?
+
We start with the data and services whose loss or downtime would most affect your business. We review existing safeguards and choose the work needed: protecting accounts, email and computers, setting up backups with recovery testing, or securing the network. If the current environment is unclear, an audit or security test helps define the scope. We prioritise implementation and ongoing support according to risk, budget and your team's capacity.
Can you implement fixes after an audit?
+
Yes. Implementation and subsequent support can be agreed separately. The plan sets priorities, deadlines, access, change owners and acceptance criteria. An audit report does not confirm that fixes have been implemented. Designated people in the company decide on risk, budget and change acceptance.
Choose the first step
Describe your environment, critical services, customer requirements, audit deadline or recent incident. Identify decision-makers and the scope you need: assessment, testing, implementation or ongoing support. Do not send passwords or confidential material through the form.
Discuss your security scope