The European Union NIS2 Directive aims at strengthening the technical protection of organizations and ensuring consistency in network and information security. The NIS2 regulation that entered into force in Hungary in 2024 takes cybersecurity requirements for companies to a new level, and compliance with these requirements can be verified by an audit conducted by VantaSec.

The Information Security Management System (ISMS) certification according to the ISO/IEC 27001 system standard attests that the organization protects information, manages risks, and ensures business continuity consciously and in a regulated manner. Implementing and maintaining the system helps ensure conscious risk management, building trust, and compliance with regulations, regardless of business size or business activities.

The purpose of ESG certification under Government Decree 424/2025 (XII. 23.) is to verify, in an independent an objective way, that the ESG report of the organisation complies with the relevant legal and professional requirements. In the certification process, VantaSec evaluates the ESG report for compliance with content and formal requirements, the soundness of the materiality assessment, and the functioning of the ESG risk management system. Furthermore, the substantiation, traceability and authenticity of ESG data is also assessed, as well as the processes and controls related to drawing up the report.

During the certification of software products implementing ISO/IEC 15408 IT security functions, the specifications of the security functions, the appropriateness of the threat model, and the implementation and testability of the security mechanisms are analysed. The outcome of the certification will demonstrate whether the product verifiably complies with the specified safety objectives.

The testing of the integrity of IT systems is an important element of the IT security preparedness of organizations. Such an audit shows how well a system used in an organization is protected against unauthorized access and data flows, both from outside and inside.

VantaSec Ltd. conducts the security audits of electronic information systems in accordance with the provisions of Decree No. 7/2024 (VI. 24.) MK. The audit shall include a risk analysis of the system, the design of the countermeasures, and the adequacy of the operational and monitoring processes, with a view to objectively demonstrating compliance with the security requirements laid down in the relevant legislation.

VantaSec Ltd. performs safety assessments of industrial command and control systems based on the recommendations of NIST SP 800 53 and NIST SP 800 82. During the audit, the cyber risks, network architecture, access management and monitoring solutions specific to the industrial environment will be assessed, while also keeping in view operational security and availability requirements.

Document management software product certification is a special certification process that verifies from a technical perspective whether the system used complies with the legal and operational requirements applicable to electronic document management. Without a certified document management software, you can no longer conduct electronic business in a secure and legally compliant manner.

VantaSec Ltd. performs the certification of systems producing electronic copies of paper documents in accordance with Government Decree 321/2024 (XI. 6). The verification includes checking the integrity of the reproduction process, ascertaining content integrity and technical solutions to guarantee invariability. The certificate attests that the electronic copy is suitable to have legal effect.

VantaSec Ltd. carries out the conformity assessment of trust services according to the requirements of Regulation (EU) No. 910/2014. The audit examines in detail the service processes, cryptographic key management, certificate lifecycle management, incident management and business continuity procedures. The assessment prepared at the end of a successful audit aims to provide adequate assurance that the operation is legal and safe.

VantaSec Ltd. carries out the assessment of digital archiving solutions according to the requirements of Decree No. 1/2018 (VI. 29.) ITM. The assessment covers the mechanisms that ensure long-term retention of archived data, integrity protection and the maintenance of retrievability and readability. A successful audit confirms the preservation of the evidentiary value of the archived documents.

VantaSec Ltd. assesses the compliance of electronic signature products according to the ETSI TS 119 101 specification. The audit analyses the use of cryptographic algorithms, key generation and key management processes, as well as the security features underlying signature generation. Certification verifies that the operation of the product is in compliance with the standard and legal requirements.

VantaSec Ltd. assesses the electronic signature systems on the basis of the CEN-EN 419 241-1 standard. The audit covers the entire operation of the system, including the processes for creating, managing and verifying signatures. A satisfactory outcome of the assessment demonstrates that the system is suitable for the secure management of electronic signatures having legal effect.

The purpose of certification is to evidence that the system examined is in compliance with the requirements laid down in Act XXXIV of 1991 on Gambling Operations and in the related implementing decrees. The assessment conducted by VantaSec covers the system’s operations, prize accounting mechanisms, data processing and logging solutions, and security controls. The certification process also covers the assessment of functions intended to ensure the clarity, transparency and auditability of gaming operations.

The WLA - SCS:2020 certification is designed for lottery and gaming operations to prove their compliance with international security standards. The certification provides internationally recognised evidence for secure and responsible governance. VantaSec Kft. is an auditor organisation recognised and registered by WLA: WLA Affiliated Assessment Service Entities

The purpose of cybersecurity certification of information and communications technologies is to verify the compliance of specific ICT-based products, services and systems with cybersecurity requirements. VantaSec, registered by the SZTFH (Supervisory Authority for Regulatory Affairs) as a conformity assessment body, performs conformity assessment activities at the “basic” level of assurance in accordance with the requirements laid down in Decree No. 10/2023 (V. 15.) SZTFH.

The purpose of vulnerability assessment is to identify security vulnerabilities of information systems, networks and applications, and to assess the related risks. Based on the assessment performed by VantaSec, clients are provided with a comprehensive and objective view of their status in terms of information security, including any potential threats to their systems, offering appropriate solutions to reduce cybersecurity exposures, strengthen business continuity, and increase the security maturity level of the organisation.

If the service you are looking for is not included among the categories above, or if you have a specific conformity assessment, certification, audit, or information security requirement, the expert team of VantaSec is available to assist you. For unique requirements, we prepare tailored professional proposals taking into account the specific regulatory, technical, and business environment.