Detection and response certificate
A+Global score
<1 minMTTD
1 minMTTR
9corrections deployed
Sample certificate · download
- Home
- Use cases
- Cyber compliance & scoring report
Compliance you can prove, not declare.
Scores and evidence from real tests, for auditors, regulators and your board.
In this pageThe documents your auditors read ↓
Our added value
Compliance is not a one-off audit. We test, measure and improve, again and again.
- Test
In real conditions
Attack simulations and training campaigns, on a schedule.
- Score
One method
The same grades and metrics, campaign after campaign.
- Improve
With you
Corrections tracked and supported until they hold.
- Prove
To the right audience
Board, auditors and regulators, at every cycle.
Every cycle feeds the next: that recurring follow-up is our value.
What you get
Your outputs
Two certificates, renewed at every cycle: improvement measured, tracked and supported.
Sample certificate · download
Training and maturity certificate
57,602employees trained
76 minaverage training time
+90%engagement
2.3 → 3.8maturity, out of 5
Quarter focus themes illustrative share of training time
- AI threats42%
- Phishing35%
- Data leak23%
Sample certificateWhat you keep
From BlackNoise AEV
- Detection and response certificate, per campaign
- Event-by-event detail, mapped to MITRE ATT&CK
- Threat-led testing evidence for TIBER-EU and DORA
- Prioritized remediation plan, with owners
From BlackNoise Skills
- Training and maturity certificate
- KPI and KRI compliance reports: NIS2, DORA, GDPR
- Completion and maturity, by population
- Focus themes and their progress, cycle after cycle
Our tools and our method
How we do
Evidence from three sources
Technology, organization and people, scored with the same method.
Technical
Real attack simulations on your production, scored event by event.
Detection and response validation →Organizational
Crisis exercises with timed decisions, gaps and an owned action plan.
Cyber training & exercise →Human
Training completion and cyber maturity, by population and by regulation.
Cyber culture at scale →Mapped to your obligations
What each framework expects, and the evidence we produce for it.
NIS2Incident detection and response readiness, crisis management tested, staff and management trained.
DORADigital operational resilience testing, threat-led testing, ICT incident handling, training.
TIBER-EUThreat-led red team evidence, with real artifacts, IOCs and timelines.
PCI DSSEvidence from threat-led tests on the systems in scope.
GDPRStaff awareness and data protection training, tracked by population.
Evidence supports your compliance work. It does not replace the assessment of your auditor or regulator.
Run again, measure again
The same campaigns replayed over time: every grade shows what improved, and what still needs work.
The platforms behind it
BlackNoise AEV and BlackNoise Skills produce every score.
The documents your auditors read
One certificate per platform, renewed at every cycle.
BlackNoise AEV · certificate
Download the sample certificate
- Global gradeA to E, on every executed event.
- MTTD and MTTRComputed on alerted events.
- ATT&CK detailEach event: tactic, execution, detection status.
BlackNoise Skills · certificate
- Training coverageEmployees trained, by population and regulation.
- KPI and KRIReady for NIS2, DORA and GDPR reporting.
- MaturityCyber maturity and focus themes, cycle after cycle.