Frequently asked questions
Don't see your question? Ask it directly through the contact form.
What's the difference between NIS2, ISO 27001, CyFun and GDPR?+
NIS2 is a European directive, a legal obligation for certain sectors and organisation sizes. ISO 27001 is an international standard, voluntary but often contractually required by clients or tenders. CyFun is a Belgian self-assessment framework from the Centre for Cybersecurity Belgium, a more accessible alternative for demonstrating NIS2 compliance. GDPR is European privacy legislation, applicable to virtually every organisation that processes personal data. They overlap partly, for example on information security controls, but each serves a different purpose.
Does my company fall under NIS2?+
That depends on your sector and size: medium and large organisations in designated sectors (such as energy, transport, digital infrastructure and healthcare) generally fall under the directive. A short scoping check during an introductory call quickly clarifies your situation.
How long does a GAP analysis take?+
Usually a few weeks, depending on the size of the organisation and the chosen framework. Document review and interviews take up most of the time; how quickly documentation and access are available also affects the timeline.
Can Millecam act as our external DPO?+
Yes. Robin is a DPI-certified Data Protection Officer and takes on that role externally through DPO-as-a-Service, on a monthly basis.
Does Millecam only work with SMEs?+
The focus is on SMEs, because they rarely have an in-house compliance officer yet still have to meet the same requirements as larger organisations. Larger engagements are negotiable, on request.
What does an engagement with Millecam cost?+
That depends on the service: a GAP analysis has a fixed price, an implementation track is estimated per project, and DPO-as-a-Service or fractional support run on a monthly or day rate. A concrete figure follows only after a short intake call.
Is a first conversation non-binding?+
Yes. An introduction of around thirty minutes is free and non-binding, and serves to determine if, and how, Millecam can help.
Do you work together with other IT or security partners?+
Yes. GRC advice is often separate from technical implementation. Millecam works alongside a client's existing IT partners where useful, or refers out when needed.