Security that stands up to an audit and to an attacker.
Dikisec advises regulated organisations on cyber governance, risk and compliance, from board-level strategy to the controls that run day to day, including the governance of AI tools.
What we do
Practical advisory for security leaders who need a programme that works, can be measured and can be explained to a regulator.
Governance, risk and compliance
We design and mature GRC programmes: policy frameworks, risk registers, control libraries and reporting that gives leadership a clear view of exposure.
- ISO 27001
- NIST CSF
- GDPR
- NIS2
- DORA
AI governance and security
We help you decide which AI tools your organisation can use, under what conditions, and how to monitor them: acceptable-use rules, vendor assessment, data-handling controls and alignment with emerging regulation.
- ISO/IEC 42001
- EU AI Act readiness
- Vendor AI risk
Security leadership on demand
Experienced senior cover for organisations without a full-time security executive. We set direction, own the roadmap with your team and represent security to the board and to auditors.
Third-party and supply chain risk
A repeatable way to assess, tier and monitor the suppliers that touch your data and systems, so due diligence scales with your vendor list.
Security assurance and audit readiness
Gap assessments, control testing and evidence preparation ahead of certification, customer audits and regulatory reviews.
How an engagement runs
Every engagement follows the same four stages, with a written output at the end of each so you always know where you stand.
Assess
Map your assets, obligations and current controls. Deliver an honest baseline.
Prioritise
Rank gaps by business impact and effort. Agree a roadmap that fits your budget.
Implement
Work alongside your team to put policies, controls and tooling in place.
Sustain
Set up metrics, reviews and ownership so the programme keeps working after we leave.
Sectors we know
Experience in environments where security failures carry regulatory, financial or safety consequences.
Life sciences
Clinical and research data, validated systems, global privacy obligations.
Financial services
Operational resilience, third-party oversight and supervisory expectations.
Aviation
Safety-critical operations, strict regulation and complex supplier chains.
Government
Public-sector assurance, procurement requirements and citizen data protection.
Led by a practitioner, not a pitch deck.
Dikisec was founded by Andreas Tryfonos, a security leader with more than 13 years of experience in cyber security, risk and governance across life sciences, financial services, aviation and government.
That background means advice grounded in how security teams really work: limited budgets, competing priorities and auditors who want evidence. We write recommendations you can act on the following week.
Based in Cyprus and working with clients across the EU, the UK and beyond.
Tell us what you are trying to protect.
Send a short description of your situation. You will get a reply from a person, usually within two working days, with suggested next steps.