A practitioner, not a reseller.
The program is led by an information security manager with experience in training and IT audits. Someone who has been on the other side of the same checks.
Ivan Dragaš
and INC.
Awareness programs and consulting led by a practitioner with experience in regulated industries.
FOUNDER / LEAD CONSULTANT
Ivan Dragaš
Infosec Consulting
WHO LEADS THE PROGRAM
Ivan Dragaš.
Information security manager in regulated industries — aviation, banking, telecommunications and energy.
As a consultant he led security and business continuity projects for banks under NBS and CBCG regulation. He holds a degree in engineering from the Faculty of Electrical Engineering, University of Montenegro.
For more than 18 years he has led training, from basic programs for all employees to specialized workshops for management and technical teams. Training in our language and in English.
- CRISC · CISA
- ISO 27001 Lead Auditor (IRCA)
- ISO 9001 Lead Implementer
EXPERIENCE IN NUMBERS
Training and information security.
10+
years as an information security manager
up to 2,500
people a year through programs he leads
500+
live participants a year over the last 10 years
7
years on the platform. A direct partnership agreement with the vendor, not a resale, but daily use.
↓
Result in practice: click rate pushed below the European average, and the rate of reported suspicious emails steadily rising.
AviationFinancial sectorTelecommunicationsEnergy
WHY INC
How we work.
A boutique approach: an experienced manager who leads the program, not a team of juniors with a script.
Local where it matters.
Simulations and workshops in our language, with scenarios from local practice. An international library of e-learning modules in English.
Regulation as the starting point.
The program starts from the Information Security Law, NIS2, ISO 27001 and data protection, with evidence tied to these frameworks.
Evidence for real checks.
Report rate, training completion and a quarterly evidence package for audit, supervision, customers and the parent company.
WHERE THE EXPERIENCE COMES FROM
Experience in regulated industries.
Financial sector
Information security, IT audit and compliance projects in over 15 banks and insurance companies in Montenegro and Serbia.
Aviation industry
Information security management in an international MRO company, in a Part-IS, NIS2 and GDPR environment.
Telecom and industry
Risk assessments, business continuity and awareness programs in regulated organizations in the region, including retail.
References are anonymized. Linking to a reference is possible after an NDA is signed and with consent.
INITIAL ASSESSMENTWhat does your
Book a conversation What does your
team need?
Let's start with a 30-minute conversation.
The initial assessment is free and non-binding.