IC

IS Consulting

IS Consulting sp. z o.o.

Warszawa, Poland

GRC & ComplianceSecurity AwarenessApplication SecurityPenetration Testing
Founded 2020Serves Enterprise, SMB, Public Sector, Critical Infrastructure
Profile last updated: August 24, 2026

About

Founded in 2020, IS Consulting is a cybersecurity company based in Warszawa, Poland working in grc & compliance, security awareness, application security +2 more.

IS Consulting is a boutique cybersecurity advisory firm founded in 2020 and based in Warsaw, Poland. It specialises in cybersecurity for healthcare, regulated sectors and organisations of critical importance with limited resources. Services include NIS2 and KSC audits, preparatory and voluntary compliance audits against standards such as ISO/IEC 27001 and ISO 22301, cybersecurity maturity assessments across people, processes and technology, virtual CISO (vCISO) services, business continuity and disaster recovery planning with tabletop exercises, cybersecurity training and awareness programmes, and design of shared managed security service (MSSP) architectures for local governments, corporate groups and consortia. The firm positions itself as advisory only and vendor-independent: it explicitly does not operate a SOC, SIEM, 24/7 monitoring, incident response or other managed security services. It maintains a ShieldNet framework used internally and recommended to clients. The company coordinates the ASCLEPIUS project, an EU-funded initiative under the Digital Europe Programme via the ECCC that raises cybersecurity levels across European healthcare providers. IS Consulting is a member of ECSO and the NCC-PL community, and it publishes regulatory position papers and sector reports, including through its affiliated expert initiative, the Instytut.

Location

Warszawa, Poland

Founded

2020

Company type

Limited company

Legal name

IS Consulting sp. z o.o.

Registration

KRS 0001257716

VAT number

5273229833

Focus areas

NIS2KSCvCISOmaturity assessmentbusiness continuitytabletop exercisesMSSP designcybersecurity traininghealthcare cybersecurityASCLEPIUSShieldNetadvisory

Languages

PLEN

Services & products

Security domains

GRC & ComplianceSecurity AwarenessApplication SecurityPenetration TestingData Protection

How they deliver

ConsultingProfessional ServicesTraining

Products

ShieldNet

View

Cybersecurity framework

Cybersecurity framework for organisations with limited resources, comprising a control framework with a management system, sector add-ons including healthcare, and an education programme mapped to ECSF. Not a regulatory requirement.

Customers

EnterpriseSMBPublic SectorCritical Infrastructure

Industries served

HealthcarePharmaceuticalsMedical devicesRail transportTransport and logistics

Compliance & partners

Compliance frameworks

NIS2KSCISO/IEC 27001ISO 22301CIS ControlsNISTIEC 62443HIPAAGDPREHDSMDRCRAAI Act

Credentials & affiliations

Industry memberships

ECSONCC-PL

People

Management & team (1)

Other cybersecurity companies in Poland

View all