Practical cybersecurity

Many organisations build an ISMS that is primarily good at one thing: obtaining certificates. It costs time and money, but hardly improves cybersecurity. It feels cumbersome, heavy, and confusing.

Luméro takes a different approach!
Not with more rules, but with the right ones.
Not with thick documents, but with clarity.
Not with checkboxes, but with real protection.

Driven by a single vision. Built with care.

The driving force behind Luméro is Menno Verheij (MBA), an expert with nearly 30 years of experience in ICT, security operations and management systems. He combines a business perspective with deep technical knowledge and designs ISMSs that add real value and fit the people, processes, and character of your organisation.

Tight. Honest. Workable. And future-proof…

Thanks to his MBA background and leadership experience, he understands governance goals and commercial interests from the inside out, delivering solutions that match your organisation’s risk appetite and strategic direction.

For organisations that choose quality over complexity:
who want to feel secure, not just demonstrate it
who want to relieve their teams, not overload them
who look for a partner who listens, understands, and refines
who believe security is a foundation for trust and growth

Luméro | simplicity. security. progress.

Value Proposition

van gap naar roadmap naar werkende controls in weken, niet kwartalen.
Security ingebed in mensen, processen en tools.
audit-ready en uitvoerbaar door je team.

Services

Short, focused engagements that deliver audit-ready results without drowning teams in paperwork.

ISMS & Compliance

ISO 27001, ISMS implementation and NIS2 readiness in one coherent approach.

ISMS Implementation

Implementation of a practical information security management system: business impact analysis, assessment (cyber check), policy documents, evidence packs and audit preparation.

NIS2 Readiness Program

Translating EU requirements into a pragmatic plan: governance, incident handling, supplier due diligence and reporting.

Security Operations & Strategy

Interim IS manager / vCISO and enablement of teams so controls actually keep working.

Interim IS Manager / virtual CISO

Hands-on digital resilience 1–3 days per week. Assessment (cyber check) based on CIS Benchmarks, independent advice and handover.

Security Enablement

Bringing policy to life in operations: playbooks (incident response, operational and compliance/governance), training and checks for lasting control ownership.

Security Strategy & Roadmap

Setting direction and priorities: translating risks, compliance requirements and business objectives into a concrete plan that guides investments and governance.

How I work

Short, focused sprints with visible progress, zero fluff.

  1. Step 1. Rapid Assessment

    Interviews, artefact review, and a risk snapshot you can act on.

  2. Step 2. Plan & Commit

    Scope, milestones, success measures. Agreed and visible.

  3. Step 3. Sprint Deliveries

    Controls live, evidence collected, blockers removed.

  4. 4) Handover

    Playbooks, owners, and a simple operating rhythm.

Example engagements

Representative results across SaaS, healthcare, and professional services.

Healthcare

NIS2 readiness; governance & supplier controls embedded.

SaaS scale-up (120 FTE)

27001:2022 transition; passed external audit in 10 weeks.

About

I blend operations leadership with deep security and IT experience. MBA-level strategy, hands-on delivery. I work with teams — not around them —so improvements stick after I leave.

  • • ISO 27001, NIS2, CIS Controls
  • • Program & change leadership
  • • Azure/Cloud, DevOps, and service operations

Plan een kennismaking (20 min)

Korte, vrijblijvende kennismaking om te bepalen of mijn aanpak past bij jullie situatie.

Talk to me

Please briefly describe your situation. Will respond within one working day.

By submitting this form, you agree to the Luméro Website Terms of Use and Luméro Privacy Policy.

Prefer a quick intro? Call directly: +31 6 11 80 48 10