Cybersecurity is now both a business priority and a regulatory necessity for organisations in Greece and Cyprus

Geopolitical instability, rising cyber threats, emerging technologies, and evolving regulations demand a clear and structured approach –built on actionable strategies and programs, effective controls, and targeted services tailored to each organization’s needs and profile.

Greek and Cypriot organisations must strengthen their cyber security by increasing investment, improving leadership oversight, aligning with regulations, enhancing business resilience, and partnering with experts to address evolving threats.

The ISF Resilience Programme

The ISF Resilience Programme is a structured and service-oriented consulting offering with a holistic approach, designed to contribute tothe resilience of organisations by addressing the following strategic aspects:

Governance: Formulate the framework for strategic direction andorganizational plans.
Risk Management: Define the risk management framework and the threatlandscape to manage security risk.
Compliance and assurance: Assess and augment your position againststandards, regulations and good practices.
Awareness and Readiness: Evaluate readiness and raise awareness forsecurity capabilities across the organisation.
Industry insights: Educate and train diverse audiences on cyber security andinformation risk topics.

Notable areas of interest

Cyber Simulation Exercises (CSE) and Wargames

These initiatives are tailored for executives and organizational members to promote collaboration, educate participants, assess readiness,identify gaps and raise awareness on the topic of incident management and crisis response.

NIS2 (Network and Information Systems Directive)

NIS2 is the EU’s cybersecurity compliance framework that sets binding requirements for how organisations identify risks, protect their systems,manage incidents, and ensure the resilience of their supply chains. The ISF provides proven methodologies and services to build robust andproportionate compliance programmes.

CRA (Cyber Resilience Act)

The CRA establishes mandatory cybersecurity requirements for products with “digital elements” placed on the EU market, regarding theplanning, design, development, and maintenance of these products by December 2027. The ISF equips organisations with the services toembed security into product lifecycle management and build the governance structures needed to demonstrate compliance.

Our research

Standard of Good Practice

ISF’s SOGP framework covers a broad range of security topics across emerging threats, technologies, and risks and helps organisations integrate up-to-date good practice into their business processes, security programmes, and compliance efforts.

AI Insights

ISF’s insight paper outlines the role that AI security governance should have in ensuring organisations can take advantage of AI while mitigating the information and cyber risk it presents.

Benchmark

The ISF Benchmark assesses security performance across environments, helping organisations identify key areas for improvement and optimise their security investment.