IT Strategy Checklist
10 questions to assess in 5 minutes where your IT strategy stands – and where action is needed most.
View for free →Free checklists for a quick overview, focus services for concrete projects, training for your team and further services on request – independent, practical and without product interests.
Ten questions, one result, no sign-up: find out where you stand and where the greatest need for action lies.
10 questions to assess in 5 minutes where your IT strategy stands – and where action is needed most.
View for free →10 questions to assess in 5 minutes the NIS2 security risk of an IT supplier.
View for free →10 questions to assess in 5 minutes your dependency risk on an IT vendor – switching costs, data portability, exit options.
View for free →10 questions to assess in 5 minutes where you stand on the EU AI Act and ISO 42001.
View for free →My core areas: clearly defined services that I regularly provide for SMEs, associations and public-sector clients.
A one- to two-day workshop with senior management to develop a prioritized, actionable IT strategy.
Inquire →Temporary IT leadership during vacancies, transition phases, or capacity shortages – both operational and at management level.
Inquire →Structured requirements gathering, market screening, and tendering when introducing new software – from requirements to contract negotiation.
Inquire →Conducting the internal audit as an independent, certified Lead Auditor – including audit report and nonconformity management.
Inquire →Structured guidance from gap analysis through to certification readiness – practical, not paper-pushing.
Inquire →Technical guidance and quality assurance for ongoing IT projects – from requirements clarification to go-live, independent of the contracted vendor.
Inquire →Review of existing IT vendor contracts and management, with recommendations for consolidation and cost control.
Inquire →Developing a company-specific AI strategy: identifying and prioritizing meaningful use cases and aligning them with your compliance requirements.
Inquire →A customized AI guideline (Standard or Extended with the Cyber Resilience Act) with concrete recommendations for management and staff.
Inquire →Internal audit of your AI management system by a certified ISO/IEC 42001 Implementer – including audit report.
Inquire →Conducting a Data Protection Impact Assessment (DPIA) under Art. 35 GDPR for high-risk processing such as AI systems, video surveillance, or profiling – including an action plan.
Inquire →Two in-house formats for SMEs: practical, no lecture-style delivery, bookable individually or together. Examples and cases are adapted to your business.
What do I need to know, have and decide as the boss – and what can I delegate? Responsibility, mandatory documents, suppliers, AI and the first hour in an emergency. With a personal assessment of your situation and a compliance kit.
Recognise attacks, handle data correctly, use AI safely – following the basic rule Stop – Check – Report. No prior knowledge needed, with real cases, live polls and reference cards to take home.
Complementary services around the core areas, on request and tailored to your situation.
Focused briefings for boards and senior management on IT security and regulatory compliance – explained clearly for non-technical audiences.
Inquire →Analysis of existing business processes and development of a concrete digitalization plan following ITIL best practices – from current-state assessment to implementation support.
Inquire →Structuring and documenting the IT services offered, including SLAs, for greater transparency toward business departments.
Inquire →Clarifying whether and how your company falls under the EU NIS2 Directive, comparing this against your current state, and a prioritized action plan with deadlines.
Inquire →Developing a business continuity plan so your company is prepared for IT outages and security incidents.
Inquire →Designing and implementing a PMO structure with standards, reporting, and escalation paths for greater transparency across ongoing IT projects.
Inquire →Temporary operational project leadership during capacity shortages or critical project phases.
Inquire →Neutral assessment of existing IT systems, contracts, or vendor decisions before a major investment – with no product interests, only yours.
Inquire →Preparation of specifications and tender documents, support through to contract signature.
Inquire →Clarifying which obligations under the EU AI Act and Cyber Resilience Act specifically apply to your company and products – with a prioritized action plan.
Inquire →Creating or updating the record of processing activities – often the first concrete step toward GDPR compliance.
Inquire →Reviewing and drafting Data Processing Agreements (DPAs) with service providers and cloud vendors.
Inquire →There are currently no offers in this topic area.
Hourly/daily rate upon request
A clear path from the first inquiry to a concrete solution – with no commitment before you know where you stand.
In a non-binding 30-minute conversation we get to know each other and I provide an initial assessment.
Together we capture the current state of your IT, identify risks and define key areas for action.
You receive a clear, transparent proposal – you decide without pressure whether and how we begin.
In the free 30-minute initial call we clarify, without obligation, which service fits your situation – including services not listed here.
Or directly: business@zambaldi.eu · +39 335 1315264