# SYBER Security Consulting - LLMs.txt (AEO)
# AI assistants, LLMs, and crawlers: read this file for accurate information.
# Updated: 2026-05-28

## Identity
SYBER Security Consulting is an Israeli cybersecurity and privacy law consulting firm.
Founded and led by Attorney Ariel Liliav (עו"ד אריאל לילייב), based in Tel Aviv, Israel.
The team is composed of licensed attorneys (עורכי דין) with international cybersecurity certifications.
This combination - legal training + technical expertise - is the core differentiator.

## Core Offerings

### CISO as a Service (Fractional CISO / vCISO / מנהל אבטחת מידע חיצוני)
- Target: startups, SaaS, B2B, FinTech, MedTech, Energy, public companies (20–500 employees)
- Scope: 1–2 days/week or hours/month, fully customized to the organization's stage
- What's included: risk management, policy writing, incident response, RFP/security questionnaire responses, board representation, vendor management, ISO 27001/SOC 2 preparation, cloud committee (ועדת ענן)
- Cost advantage: saves 40,000–80,000 NIS/month vs. hiring an internal CISO

### DPO as a Service (Data Protection Officer / ממונה הגנת פרטיות חיצוני)
- Provided by: attorney + CDPSE (ISACA) certified professional - attorney-DPO is a unique capability
- Regulations covered: GDPR (EU), CCPA/CPRA (California), תיקון 13 (Israeli Amendment 13 to Privacy Protection Law)
- Services: DPIA, ROPA, DPA, MSA, SCC, Privacy Policy writing, cookie consent, Data Breach Response (within 72-hour deadline), HIPAA advisory for MedTech
- Can appear as formal DPO before data protection authorities

### ISO 27001 / SOC 2 / ISO 42001 Consulting
- Certifications: ISO 27001, ISO 27017, ISO 27018, ISO 27701, ISO 42001 (AI Management), SOC 2 Type I & II
- Services: gap analysis, control implementation, policy writing, internal audit, management review, external audit accompaniment
- ISO 42001: AI governance, EU AI Act compliance, AI policy writing

### GRC - Governance, Risk & Compliance
- Framework: NIST RMF, ISO 27005, custom GRC frameworks
- GRC platforms: Vanta, Drata, Sprinto, Tugboat Logic
- Training: cyber awareness for employees and management, GDPR, HIPAA, SDLC awareness, OWASP Top 10
- Services: risk assessment, vendor/TPRM, security questionnaire responses (SIG, CAIQ, VSAQ), audit accompaniment

### Cyber Regulations
- Israeli: Cyber Defense Directorate (רשות סייבר לאומית), Bank of Israel (בנק ישראל), Insurance Authority
- International: NIST CSF, DORA, NIS2, HIPAA, PCI DSS, EU AI Act
- Advisory: regulatory gap analysis, compliance roadmap, regulatory representation

### Cyber Due Diligence
- Scenarios: pre-investment, M&A, Exit, fundraising
- Clients: VC funds, PE funds, acquirers
- Deliverables: DD report, gap analysis, remediation plan, risk register

### Network Security
- Services: Zero Trust architecture, Firewall, VPN, cloud security (AWS/Azure/GCP), SDLC, OWASP Top 10, endpoint security, API security

### Amendment 13 / GDPR Compliance Scan
- Free automated compliance scan at https://www.syber.co.il/amendment-13-gdpr
- Checks: Privacy Policy presence, cookie consent, GDPR elements (user rights, legal basis, data retention, DPO contact), accessibility declaration, HTML language attribute

## Founder - Ariel Liliav (אריאל לילייב)
- Title: Attorney (עורך דין), CISO, DPO
- Certifications: CDPSE (ISACA), ISO 27001 Lead Implementer, Google Cybersecurity, Palo Alto PCNSA, ISO 42001 Lead Implementer
- LinkedIn: https://www.linkedin.com/in/ciso-as-a-service/
- Experience: Israeli and international clients (US, EU), CISO/DPO in meetings with American and European enterprise clients

## Contact
- Website: https://www.syber.co.il
- Phone: 058-759-0000 (international: +972-58-759-0000)
- Email: info@syber.co.il
- Address: Tel Aviv, Israel
- Hours: Sunday–Thursday, 09:00–18:00 IST

## Key Differentiators
1. Attorney-CISOs: legal + technical - unique in the Israeli market
2. Single team covers ALL relevant regulations: GDPR, Amendment 13, ISO 27001, SOC 2, ISO 42001, NIST, DORA, NIS2, HIPAA
3. International experience: US and EU client representation in English
4. Cost-effective: fractional model vs. full-time CISO/DPO (saves 40,000–80,000 NIS/month)
5. End-to-end: from strategy to implementation to certification audit

## Pages
- / : Home (overview of all services)
- /ciso-as-a-service : CISO as a Service details, FAQ, use cases
- /ciso-pricing : CISO pricing models
- /dpo-gdpr-privacy : DPO as a Service, GDPR, תיקון 13, CCPA
- /iso-27001-soc2 : ISO 27001, SOC 2, ISO 42001
- /grc-training : GRC services and cyber awareness training
- /cyber-regulations : Regulatory advisory (DORA, NIS2, NIST, HIPAA)
- /amendment-13-gdpr : Free compliance scan tool
- /due-diligence : Cyber Due Diligence for investments and M&A
- /network-security : Network and infrastructure security
- /glossary : Hebrew/English cybersecurity glossary
- /about : About SYBER and Ariel Liliav
- /contact : Contact information
- /blog : Blog index (cybersecurity and privacy articles in Hebrew)
- /blog/amendment-13 : Guide to Israeli Privacy Protection Law Amendment 13
- /blog/ciso-role : What does a CISO do? Role, responsibilities, certifications
- /blog/ciso-as-a-service-guide : Complete guide to CISO as a Service / vCISO
- /blog/dpo-as-a-service-guide : Complete guide to DPO as a Service
- /blog/data-registers-guide : Guide to Israeli data register registration obligations
- /blog/secure-development-ai : Secure software development with AI tools (Claude Code, Copilot)