Cybersecurity · IT audit · GRC
Euridica provides cybersecurity, IT audit and GRC services for regulated organizations across Southeast Europe. We assess risks and controls, with clear recommendations for remediation.
Independent control assessments
IT audit & cybersecurity experience
Cross-border project experience
01 / Our expertise
A weakness in an IT system can disrupt a critical service or expose a gap in regulatory compliance. We assess the technical issue and its business impact together, so remediation priorities reflect the risk.
We test applications and infrastructure for exploitable weaknesses. Incident exercises and response playbooks help your team prepare for disruptions.
Risk-ranked findings with remediation recommendations.
We assess whether IT controls are properly designed and operating effectively. The scope can cover internal systems, technology projects and critical suppliers.
An assessment report with documented findings and a summary for management or the audit committee.
We define how regulatory requirements apply to your organization and help implement the policies, controls and reporting they require.
A gap assessment and implementation plan with assigned responsibilities.
We support internal teams through recurring IT audits and ongoing information security or data protection work. Responsibilities and reporting are agreed at the outset.
An agreed work programme with scheduled reviews and reporting.
02 / Who we work with
Assessments must reflect the services an organization provides, the information it holds and the obligations it must meet.
Payment security, SWIFT controls and independent IT audit for banks and payment institutions.
Business continuity, customer data protection and oversight of outsourced IT services.
Documented control assessments, protection of sensitive information and continuity of essential services.
Application security assessments and control evidence to meet the requirements of regulated and enterprise customers.
03 / How we work
Each engagement follows an agreed scope, with findings linked to evidence and remediation priorities. Reports distinguish what has been addressed from what remains unresolved.
Scope and deliverables are agreed for each engagement.
Identify critical systems, relevant obligations and dependencies on suppliers. Agree the assessment objectives and reporting requirements.
Review documentation and test selected controls. Evaluate findings against the agreed criteria and their potential business impact.
Agree remediation priorities, action owners and target dates. Define how corrective work will be reviewed.
Report conclusions and unresolved issues to the agreed audience, with evidence to support each finding.
Requirements and frameworks
We agree which requirements apply before defining the scope. The assessment considers your systems, supplier relationships and existing controls.
Independent assessment against the applicable controls in the SWIFT Customer Security Controls Framework (CSCF).
Discuss the scopeAssess information and communication technology (ICT) risk and resilience against applicable requirements of the Digital Operational Resilience Act (DORA).
Discuss the scopeSupport implementation and review of an information security management system (ISMS) against ISO 27001.
Discuss the scopeIdentify gaps in cybersecurity governance and incident reporting against applicable NIS2 requirements and national legislation.
Discuss the scopeAssess current cybersecurity practices using the NIST Cybersecurity Framework (CSF) and set improvement priorities.
Discuss the scopeReview IT governance and management practices using COBIT objectives and guidance.
Discuss the scope
04 / The practice
Based in Banja Luka, Euridica specializes in cybersecurity, IT audit and governance, risk management and compliance (GRC).
Our team's experience includes work with banks, payment institutions and central banks. We understand the evidence and reporting these institutions need for oversight and regulatory review.
Markets with project experience
Bosnia and Herzegovina · Croatia · Serbia · Slovenia · Montenegro · Albania · North Macedonia · Kosovo
05 / Start a conversation
Tell us what you need to assess and any deadlines you are working towards. We can discuss the scope and the expertise required.
Banja Luka office Jevrejska 69a, 78000 Banja Luka