Digital evidence that holds up. Systems that hold out.
A registered court expert and an ISO/IEC 27001 certified firm, Cyber Praxis investigates incidents, tests your defences and supports your compliance, in Belgium and France.
- Registered court expertListed in the Belgian Federal Public Service Justice register under number EXP2018610.
- ISO/IEC 27001:2022 certifiedDigital forensics is within the certified scope.
- Over 25 years in cybersecurityGovernance and CISO roles in finance, the public sector, energy and industry.
This month
VEEZO, our new partner for network detection
Since October, Cyber Praxis has been integrating VEEZO, the Belgian network threat detection and blocking service developed by Ozoos. With no agents or in-house SOC team, it covers a large share of the NIS2 and CyFun detection and response requirements.
Four areas, one standard of proof
Whether the task is establishing facts before a judge or demonstrating compliance to a regulator, the work rests on the same discipline: findings that are verifiable, documented and limited to what the evidence supports.
-
Digital forensics and expert witness work
For lawyers, insurers, companies and individuals facing a dispute, fraud or an incident.
- Analysis of iOS and Android smartphones, computers and servers
- Detection of spyware and abusive surveillance on phones
- Extraction and analysis of CCTV recordings and connected devices
- Investigation after ransomware or intrusion, timeline reconstruction
- Court-appointed expertise, or technical adviser to one party
-
Penetration testing
For organisations that want to know what an attacker would find, before they find it.
- Web application and API testing
- External and internal infrastructure testing
- Vulnerability assessment and remediation priorities
- Simulated phishing campaigns and awareness
-
Outsourced DPO and CISO
For organisations that need expert leadership without a full-time hire.
- Data protection officer (DPO), appointed or in support
- Records of processing, impact assessments, data subject requests
- Chief information security officer (CISO): roadmap, policies, risk management
- Artificial intelligence governance under ISO/IEC 42001
-
NIS2, CyFun and ISO 27001 compliance
For essential and important entities, local authorities and their suppliers.
- Assessment of your NIS2 scope and obligations
- Audits against the Centre for Cybersecurity Belgium's CyberFundamentals (CyFun) framework
- Preparation for ISO/IEC 27001 certification
- Incident response plans and exercises
Solutions to fix what the audit uncovers
Identifying a gap is not enough. We deploy and support tools chosen for their auditability and controlled cost.
-
VEEZO Partner
Managed network threat detection and blocking
Gateways continuously analyse your network traffic, intercept malicious communications and make risk readable, with no agents or in-house SOC team. A strong contribution to the NIS2 and CyFun detection and response measures.
Discover VEEZO -
Vauban
Open-source privileged access management (PAM) bastion
Controls, records and monitors administrator and contractor access to servers, workstations and industrial equipment. Directly addresses the privileged access requirements of NIS2, ISO 27001 and CyFun.
Discover Vauban
How an engagement works
Every engagement follows the same sequence, so you always know what is being done, why, and at what cost.
First conversation
You describe the situation in confidence. We check for conflicts of interest and what can be established.
Written proposal
Scope, method, timing and budget are agreed in writing before any work begins.
Fieldwork
Acquisition, testing or audit following a documented method, with traceability of media and operations.
Report and debrief
A clear report for decision-makers and technical staff, walked through with you.
Latest articles
Analysis and field experience on digital forensics, regulation and systems security. All articles
-
NIS2 and privileged access: what the auditor will ask you to show
Shared admin accounts, contractors on VPN, no record of sessions: why privileged access is among the first things examined in a NIS2 or CyFun audit, and what evidence to prepare.
Frequently asked questions
The questions we hear most often at a first contact.
Can a privately commissioned expert report be submitted in court?
Yes. A report prepared at a party's request can be filed as evidence. The judge freely assesses its probative value, which depends mainly on the method: documented acquisition, hash values of the media, chain of custody, identified tools, and conclusions limited to what the traces establish.
What is the difference between a court-appointed expert and a technical adviser?
The court-appointed expert is designated by the judge and works for the court, independently of the parties. A technical adviser is retained by one party to analyse the evidence, attend the expert's operations and make observations. Cyber Praxis can act in either role, never both in the same case.
Is my organisation covered by NIS2 in Belgium?
The Belgian law of 26 April 2024 transposes the NIS2 Directive. It applies to essential and important entities across many sectors, depending on their activity and size. The Centre for Cybersecurity Belgium's CyberFundamentals (CyFun) framework helps structure compliance. A first conversation is usually enough to determine whether and how you are covered.
How is the data you entrust to us protected during an engagement?
Cyber Praxis is ISO/IEC 27001:2022 certified, and digital forensics is within the certified scope. Media and copies are tracked, stored securely and returned or destroyed at the end of the engagement as agreed.
Do you work in France and in other languages?
Yes. Cyber Praxis works in Belgium and France, in French, Dutch and English.
Describe your situation
Briefly describe what you need. Please do not include sensitive details of an ongoing case here: we will discuss them by phone.
- Phone
- +32 2 318 05 30
- info@cyberpraxis.eu
- Registered office
- Lasne, Walloon Brabant, Belgium