The same incident is back for the third time this quarter. Your auditor's findings point at changes and recovery tests, again. And at two in the morning, the person on call opens a procedure that was written for another era, if they can find it at all.
You work where an IT outage quickly becomes a business crisis: a bank, an insurer, a payment firm under DORA. The policies probably exist. They may not fully cover what's needed, or be understood by those who need to act on them.
Our work closes these gaps. Incident, problem, change and configuration management, disaster recovery and business continuity, written with your people so that IT and the business act as one when it counts. Every engagement is a defined stage, with a fixed fee and a clear end, and Gert Taeymans leads each one personally.
Data-centre failover tests led, zero critical incidents.
Regulatory inspections and audits as accountable lead, zero critical findings.
Our anchor client has renewed every year.
Incidents keep coming back, or aren't handled the way they should be.
The auditor's findings keep pointing at incidents, changes and recovery tests.
IT and the business each believe the other owns the fix.
DORA applies, and the evidence is not there yet.
Start at whichever step fits where you are.
An honest outside view of where you stand. We find the root causes in policy, process and people, with interviews, and end with a prioritised roadmap and a one-page summary for your board.
What happens to your business if a data centre, a key supplier or your sign-in platform is gone. Your continuity gaps, ranked by impact, and runbooks for four scenarios, walked through with your teams.
We close the gaps: policies, work instructions and exit plans people actually use, clear roles between IT and the business, runbooks your teams can follow under pressure, and the people trained to work with them.
One recovery test or crisis exercise, before the auditor or supervisor asks for it. Your teams run it with their own runbooks; we observe, independently. You get a test report and an evidence file.
Someone senior beside you once it is built: a direct line to Gert and a seat at your change advisory board. TY Audit Ready's evidence platform included, once it is live.
A Board session fits at any step.
That is the Resilience diagnostic. We look at how incidents, problems, changes and configuration are really handled, not how the procedures say they are. For each service your clients depend on: how long it may be down, how much data you may lose, and whether your recovery plans actually achieve that. We talk to the people who do the work, because the root cause is rarely in the document alone. Fee in the proposal.
That is the BCM Analysis. A map of what runs where and which business processes depend on it, your continuity gaps ranked by impact, runbooks for four disaster scenarios chosen with you, and the quick wins and projects you need to start. It ends with runbooks your teams have walked through, and a project list your board can decide on. If the plan has to be reachable while your own systems are down, the TY BCP Vault follows on from it. Fee in the proposal.
That is the Build. It ends with approved documents in daily use, and teams that have already worked with them. The fee is set in the proposal at the end of the diagnostic or the BCM Analysis, or after a pre-audit check, scoped to its findings.
That is Prove. We agree the scenario and what success looks like with you. What worked, what didn't, and what to change go into the test report; the evidence file is for your auditor or supervisor. Runbooks that don't hold up are rewritten in a Build. Fee in the proposal.
That is the Retained advisor. A direct line to Gert, and a seat at your change advisory board for significant changes. TY Audit Ready's evidence platform is included once it is live; it is planned today. Out of hours, a crisis call with Gert is possible for retained clients, under a separate agreement. Terms and fee in the proposal.
That is the Board session, at any step. DORA expects the management body to keep its knowledge of ICT risk up to date. In half a day, we take your board or executive committee through what that means for them, in plain language. It ends with written take-aways for your minutes. Fee in the proposal.
If you have an audit coming, or one that went badly, start at the other door: TY Audit Ready. A pre-audit check, a pre-audit or post-audit diagnostic, and coaching for the talks with the auditor. When its findings need fixing, that work is a Build, here.
Each stage has a fixed fee for an agreed scope, set in the proposal before we start. No day rates.
If the scope changes along the way, we agree the change and its fee before doing the work.
Working to a budget? Tell us, and we'll propose what fits within it.
Fees exclude VAT. Travel within Belgium is included; elsewhere, at cost.
Thirty minutes. Is this the kind of problem we solve? If it isn't, we'll say so, and tell you who to call instead.
The stages, what each one covers and how it ends, and the fee. If you decide not to go ahead, anything you learned on the way is yours to keep.
Gert leads the work and is accountable for the result.
Penetration testing, software implementations or security products. We work on how your organisation runs, and how it recovers.
Tell us briefly where you are. In the form below, choose the step that fits: "Advisory: Resilience diagnostic", "Advisory: BCM Analysis, Build or Prove", or "Advisory: Retained advisor or Board session". Not sure which? Pick the closest; we'll sort it out in the first conversation.
This site and all contents is © 2026 Tymans Group BV