Your Managed
Security & Risk
Office
We manage the governance, risk, strategy & compliance side of security, so your organisation stays protected, compliant, and in control. One partner. Full program. Built around you.
Most organisations have security tools. What they lack is a security program.
You probably have a firewall, endpoint protection, maybe even a SOC provider. But who runs the overall program? Who manages the risk register, maintains your compliance posture, designs your security architecture, and reports to the board with clarity and confidence?
Building an internal team to handle governance, risk, compliance, and security strategy takes five to eight specialists and years of development. Hiring consultants for one-off projects gives you reports, but no one who stays to see the work through. There's a better model.
THE MANAGED OFFICE
We manage the program.
You keep the control.
CTRL Disrupt operates as your Managed Security & Risk Office, the strategic and governance layer that every organisation needs but few can fully staff. We run the program across five capabilities and make sure the right decisions are made about how your organisation protects itself.
From first conversation
to a managed program.
01
Foundation
ASSESS & ADVISE
We assess your security and risk across all five capabilities and agree the priorities with your management.
02
Build
IMPLEMENT
We put the roadmap into practice and set up what your organisation will run on.
03
Manage
OPERATE
We run your security and risk office as an ongoing function and report to your management.
See what each stage delivers
⟶
TRUSTED BY ORGANISATIONS ACROSS EUROPE
"
"I worked with Gijs directly during his time at LeasePlan and I was impressed by his depth of understanding in all three key areas of Risk, Information Security and Privacy. If there are few words to describe Gijs, you can use words like meticulous, precise, thorough, rigorous. Gijs was able to inspire me from his high ethical standards and his commitment of helping his customer, even going the extra mile. If it was an option in the future, I would be honoured to work with Gijs again."
Vasileios Giannakopoulos
Global Privacy and Information Security Officer
We run the program.
We orchestrate the rest.
Your security and risk program needs one partner who runs it end to end. That is our role. Specialised partners deliver the operational layer. We select them, direct them and oversee their work, so everything works as one system. We are independent of tooling and vendors, so our direction serves your interest.
What we manage
Security governance & strategy
Risk management programs
Compliance (ISO 27001, NIS2, BIO2.0, EU AI Act)
Security architecture & transformation
AI security & compliance
Policy, awareness & culture
Vendor and partner oversight
What we orchestrate
Security Operations Center (SOC)
Managed detection & response (MDR)
Penetration testing
Endpoint or network monitoring
Security tooling & vendors
Delivered by specialised partners that we select, direct and oversee as part of your managed office.
Built for organisations where security governance is becoming a board-level priority.
What makes us different.
Independent
We are independent of tooling and vendors, so our advice serves your interest.
Integrated
Five capabilities run as one program, so a decision in one area carries through to the others.
Long-term
We stay after the roadmap is delivered and keep the program running and improving.
Framework-fluent
We work across ISO 27001, NIST, NIS2, BIO2.0 and the EU AI Act, and start from what your organisation needs.
NIS2 AND AI
Where many organisations start
NIS2 and the Cyberbeveiligingswet
The Cyberbeveiligingswet, the Dutch law that implements NIS2, has been in force since 15 August 2026. It brings incident reporting, supply-chain security and personal accountability for management.
Explore NIS2
⟶
AI security and compliance
AI brings risks that most security programs were not designed for, such as model security, data governance and new regulation. We bring AI governance and compliance into your managed office.
Explore AI Security & Compliance
⟶
Let's talk about what your organisation needs.
Start with a full managed partnership or a focused assessment. The first conversation is about your situation and what would help.