Cybersecurity you can demonstrate
AI-assisted penetration testing reveals real attack paths, phishing simulations test human resilience, and our NIS2 services build a demonstrable cybersecurity capability.
Three essential pillars
Security is neither documentation alone nor a single tool. We test technical resilience, employee behaviour and the organisation's ability to manage cyber risk.
OFFENSIVE SECURITY
We do not deliver a simple vulnerability list. We demonstrate what an attacker could actually achieve, the path they could take and what you should remediate first.
GOVERNANCE & COMPLIANCE
From the initial gap assessment to a documented, operational and demonstrable cybersecurity risk-management system.
HUMAN RISK
Controlled and ethical campaigns test how employees recognise and report realistic phishing scenarios without placing operations at risk.
AI + human expertise
We use AI where it delivers measurable value: correlating large volumes of technical signals, detecting patterns and setting priorities. Every finding is manually validated by a cybersecurity professional.
Faster correlation of exposed services, technologies and known weaknesses.
Individual weaknesses are connected into realistic compromise scenarios.
Risks are evaluated by exploitability and actual business impact.
Technical remediation steps tailored to your actual environment.
Controlled and transparent process
We define systems, objectives, constraints and safe testing conditions.
We map the attack surface and potential entry points.
We connect technical signals with plausible attack scenarios.
An ethical hacker validates exploitability and the real business impact.
Management receives a clear overview, while IT gets precise remediation steps.
We verify remediated weaknesses and close the testing cycle.
A complete security framework
Every service addresses a vital part of your cyber resilience — from governance and regulatory requirements to continuity, technology and employee capabilities.
External strategic and operational information security leadership.
Gap analysis, ISMS implementation and certification readiness.
Legal, organisational and technical protection of personal data.
Identification, evaluation and treatment planning for key risks.
Business continuity and recovery following serious incidents.
Third-party assessment, contractual requirements and risk oversight.
SIEM, logging, IAM, cryptography and access management.
Continuous employee education and security-culture development.
Training and certification
As a certified PECB partner and trainer, we deliver professional training, certification programmes and internal workshops tailored to management, IT teams and employees.
Certified partner and trainer
Professional cybersecurity and compliance trainingExperience behind the technology
MIT poslovni procesi d.o.o. is a specialised cybersecurity consultancy focused on penetration testing, regulatory compliance and the development of security capabilities.
The company is led by Matija Verić, M.Sc. in Information Technology, a professional with more than 20 years of international experience in IT, cybersecurity and business development. He is a Certified PECB Ethical Hacker, Certified PECB NIS2 Lead Implementer and a certified PECB trainer in both fields.
Based in Zagreb, Croatia, we are ready to support clients across Europe and international markets beyond the Adriatic region, with remote or on-site delivery tailored to each project.
Let’s start a conversation
In a short initial call, we will define the right scope, methodology and expected outcomes.
