We exist to make organisations more resillient.

CTRL Disrupt is a managed security and risk management firm based in the Netherlands. We help organisations stay secure, compliant, and in control — by operating as their dedicated external security and risk team.

Not just another consultancy.

CTRL Disrupt was founded on a simple observation: most organisations don't need more security consultants. They need a security and risk function that actually works.

The traditional model is broken. Organisations hire consultants for one-off projects, receive a report full of recommendations, and then struggle to implement any of them — because no one owns the outcome. Meanwhile, regulations multiply, threats evolve, and the gap between what organisations need and what they have keeps growing.

We decided to build something different. Not a consultancy that advises from the outside, but a firm that embeds itself as part of the organisation. A managed security and risk office — integrated, ongoing, and accountable.

The name says it. CTRL: the structure, discipline, and accountability that security and risk management demands. Disrupt: the willingness to challenge assumptions, break from convention, and build approaches that actually fit the world as it is.

CTRL Disrupt

What We Do

About

Insights

Start a Conversation

CTRL Disrupt

Your Managed Security & Risk Office.
Based in the Netherlands.

COMPANY

EXPERTISE

ISO 27001

NIS2

BIO2.0

EU AI Act

AI Security & Compliance

Marshalllaan 2
2625 GZ Delft
The Netherlands

Want to know more about who we are?

We'd rather show you than tell you. Start a conversation and experience firsthand how we think, how we work, and what we can do for you and your organisation.

Start a Conversation

People who know this work deeply.

Every client works with professional experts. When you work with CTRL Disrupt, you work with the people who actually do the work.

Kevin Blaazer

Associate Digital Resilience

BSc | Associate of (ISC)²

Gijs Brandenburg

Managing Director & Founder

MSc | CISSP CISA CISM CRISC SCF

Ali Haidari

Associate Digital Resilience

BSc

How we think about security and risk.

We combine academic depth — a genuine understanding of risk theory, governance models, and regulatory architecture — with years of practical experience building and running these functions inside real organisations.

Proactive

The organisations that thrive under pressure are the ones that prepared for it. We build capability, identify risks early, and create the conditions for resilience — before incidents force action.

Integrated

Governance, strategy, risk, architecture, and compliance are not separate disciplines in practice. We connect them into one coherent function, managed by one team, with one clear direction.

Proportional

Not every organisation needs the same level of everything. We tailor our approach to match — building what's needed, not what a framework says you should have regardless of context.

Leaving things in better shape than we found them.

Our mission is to make organisations more resilient — so they can manage their threats, seize their opportunities, and deliver their unique value to the world.

We believe that security and risk management, done well, is not a constraint on ambition. It's an enabler. Organisations that understand their risks, protect their assets, and meet their obligations are freer to innovate, grow, and serve their stakeholders.

What drives us.

Awareness

We pay attention — to our clients, to the landscape, and to each other. We don't apply templates. We learn your reality before we start building. And we stay attentive as that reality changes.

Courage

We don't follow hype cycles or hide behind buzzwords. When something needs to be said — to a client, to a board, or to each other — we say it. Clearly, respectfully, without hesitation.

Joy

We take the work seriously. We don't take ourselves too seriously. Life is too short to spend your career in a joyless environment, and security is too important to be left to people who've stopped caring.