GERICO Security SRL

Our services are structured as follows:

• Advisory

Gerico provides the client with ad-hoc services bringing its experience to set out or manage appropriate models of risk management and information security governance processe. It protects your information assets, manages crises and maintains operational and business continuity.

• Inspection Body

Gerico has the first Inspection Body compliant with the ISO17020 standard in Italy and in Europe. It carries out Cybersecurity inspections and formally attests the current “cybersecurity posture” of an organization.

• Audit

Gerico ensures 1° and 2°- party Audits of Management Systems  or audit activities needed after a cyber incident.

• Academy

Upon request, Gerico Academy provides specialised training courses in Information Security, Cybersecurity, Business Continuity and Risk Management in a classroom setting or remotely

The services provided concern the main international best practices and standards on Cybersecurity and Business Continuity. In particular, Advisory, Audit services, Training courses and certification services compliant with:

• Cybersecurity ICT and ISMS

ISO/IEC27001, ISO27701, ISO27017, ISO27018, TISAX, PCI-DSS

• U.S. DoD Cybersecurity  and Federal Agencies Compliance

NIST SP800-171r2, CSF – Cyber Security Framework, CMMC - Cybersecurity Maturity Model Certification

• Cybersecurity OT/SCADA and control systems

ISA62443, NIST SP800-82, EUROCAE ED202A

• Business Continuity

ISO22301

• Risk Management

ISO31000, ISO27005, NIST SP800-30, EUROCAE ED203A

Our management consulting services enable the creation of a management system for information security and provide a clear vision of a company’s Cyber exposure

In addition, should an organization need a responsible person for Security Governance, who guides the activities and choices according to the business needs and strategies, we propose "CISO as a Service":    CISO - Chief Information Security Officer.

“CISO as a Service” provides organizations with the experience of highly qualified professionals who support such companies for the time strictly necessary. CISO as a Service is all ad hoc, tailored according to the needs of the Client. Our experience is made available to the Management with the aim of carrying out the most appropriate actions for the business. Methods, services and times are decided by clients accordingly