Grupo CFI

Grupo CFI is a cybersecurity and data protection consultancy serving businesses, public institutions and third-sector organisations. Operating since 2005, the company combines consulting, audits and proprietary software to help clients protect information and meet regulatory requirements. Its services cover three main areas: information security management system (ISMS) implementation, cybersecurity, and data protection. The team supports frameworks and requirements including ISO 27001, ISO 27701, Spain’s ENS, TISAX, DORA, NIS2, the European Cyber Resilience Act, GDPR, LOPDGDD and LSSICE.

Cybersecurity services include security audits, ethical hacking, vulnerability assessments, digital forensics and business continuity planning. Data protection support ranges from compliance assessments and audits to external data protection officer services and legal defence. Grupo CFI also offers training and external CISO services.

Its proprietary tools include ISO Director for managing security systems, HubLOPD for data protection compliance, and LOPD Manager for documentation and audits. The company reports more than 2,500 protected clients and over 1,000 implementations. Its work has received several Spanish business and technology awards.