A samurai is "he or she who serves". Samoerai Informatiebeveiliging, at the Keizer Karelplein in Nijmegen, took that meaning as its name. Its consultants work beside their clients, not above them, to make their world safer: knowing the risks, staying in control, and finding the right balance between business, security and privacy.
Advice only works when it is accepted
Security and privacy projects are change projects, and change always costs money, time and some scepticism. So Samoerai borrowed a line from the Bushido, the code the samurai wrote their wisdom down in.
“Before you give advice, first find out whether the other person is willing to accept it.”
From the Bushido, as quoted by Samoerai
That is why its approach builds in the five success factors of change management. One example is the Hackersworld workshop, made to raise awareness of security and to take away resistance before it slows a project down.
Scan, project, in control
Like the samurai with their Bushido, Samoerai wrote its own knowledge down in a fixed approach of three phases, based on Plan-Do-Check-Act. It starts with a scan of where an organisation stands on security, compliance and privacy, measured against standards such as ISO 27001, NEN 7510, BIO, NIS2, DigiD, ISO 22301, DORA and the GDPR. A six-step project then leads to compliance or certification. After that, yearly repeats keep the organisation in control.
The roles every organisation needs
The standards prescribe roles that many organisations find hard to fill. Samoerai fills them as a service: Chief Information Security Officer, Information Security Officer, Data Protection Officer, Technical Security Officer and support with incidents. Clients get its sector-specific templates and knowledge, so nobody has to reinvent the wheel. For the legal side, Samoerai works closely with law firms.
Inside the team, knowledge is shared in regular online sessions, peer reviews and days of working together. As the company puts it: a Samoerai consultant never gives up.
SamoeraiGRC solutions for information security, privacy and AI.
