Cybersecurity company in Badajoz: consulting and digital forensics
We help companies and public bodies protect their information and comply with the ENS, ISO 27001 and NIS2. And when an incident ends up in a dispute or in court, we write the expert report.
We advise on what we apply every day
CEDESA holds the National Security Framework (Esquema Nacional de Seguridad, ENS), ISO 27001 and ISO 9001 certifications, and maintains them in the systems it builds for the public sector. That experience of implementing and auditing security in real projects is what we bring to every client.
We work from the Science and Technology Park of Extremadura (PCTEX) in Badajoz, with companies and public bodies in Badajoz, Cáceres and the rest of Spain.
What we do
Cybersecurity consulting
We review how your organisation protects its information, what the regulations that apply to it require, and what it needs to change to comply.
- Information security assessment
- Compliance with the National Security Framework (ENS)
- ISO 27001 implementation
- NIS2 obligations for public sector suppliers
- Policies, procedures and incident response
Digital forensics
We analyse digital evidence with forensic methods and set it out in a report that a judge can assess.
- Expert reports for criminal, civil and employment proceedings
- Validation of WhatsApp conversations and emails
- Forensic analysis of mobile phones, computers and servers
- Chain of custody with a hash of every piece of evidence
- Internal investigations into data leaks, fraud or intrusions
- Testimony to ratify the report in court
Frequently asked questions about cybersecurity and forensics
What does a cybersecurity company like CEDESA do?
Mostly consulting: we review how the organisation protects its information, what the regulations that apply to it require (ENS, ISO 27001, NIS2) and what it needs to change to comply. When an incident has already happened, a forensic expert report documents what took place with evidential value.
Does my company have to comply with the ENS?
The National Security Framework (Royal Decree 311/2022) is mandatory for the public sector and for the companies that provide it with services or technology solutions. If your company works for the public sector, the tender usually asks for certification (medium or high category) or a declaration of conformity (basic category).
What is the difference between the ENS and ISO 27001?
ISO 27001 is a voluntary international standard for managing information security. The ENS is mandatory in Spain for the public sector and its suppliers, and sets specific measures according to the category of the system. Many measures overlap, so it makes sense to implement both at the same time.
What is a digital forensic report and when is it needed?
It is a technical report, signed by a computer engineer, that analyses digital evidence (messages, emails, devices, access logs) and explains its conclusions so that a judge can assess them. It is requested in criminal, civil or employment proceedings, and in internal investigations after fraud or a data leak.
Is a WhatsApp screenshot valid evidence?
It can easily be challenged, because a screenshot can be altered without leaving a trace. For it to carry weight, a forensic analysis of the device should prove that the conversation is complete and authentic, with chain of custody from the extraction onwards.
Do you only work in Badajoz?
Our head office is in Badajoz, at the Science and Technology Park of Extremadura, and we work with clients all over Spain: consulting can be done remotely and visits are arranged to suit the project.
Need this service?
Tell us about your project in a couple of lines