Home / Services / Convergence Assessment

The Convergence Assessment: A Roadmap Ready for Decision-Making in 8 Weeks.

We’ll show you which regulatory frameworks apply to you, where you stand today, and how you can use a consolidated set of controls to comply with multiple regulatory frameworks simultaneously. Set it up once, demonstrate compliance multiple times.

Here's how it works

Phase 1 · Week 1 · Scoping

Kickoff Workshop

Products, markets, roles as manufacturers and operators, applicable regulations, and existing certifications and documentation. The result is a coordinated scope of testing.

Phase 2 · Weeks 2 through 3 · Intake

Structured Survey

We collect your existing documentation—such as policies, processes, and technical documents—via a secure Swiss platform. The result is a comprehensive database.

Phase 3 · Weeks 3 through 6 · Analysis

Convergence Analysis

Analysis of 19 recurring measures and 11 frameworks. Each assessment is supported by sources and validated by our experts. The result is a rated gap analysis for each set of regulations.

Phase 4 · Weeks 7 through 8 · Results

Roadmap Ready for Decision-Making

Overview of areas affected, a prioritized action roadmap with quick wins, and a consolidated set of controls. Presented to your executive management.

Here's what you'll get

Items to Be Delivered

Five Findings You Can Put to Use Right Away

  • —Overview of your compliance status by regulatory framework
  • —Gap analysis covering 19 measures, with each statement supported by a source reference
  • —Prioritized Roadmap with Quick Wins
  • —Consolidated Control Set for All Regulatory Frameworks
  • —Management Summary and Final Presentation

Why This Is Unique

An assessment covers both roles. Your responsibilities as a manufacturer and as an operator are assessed in a single process, based on a common ISO 27001 framework.

Your data remains in Switzerland. All processing takes place on Swiss infrastructure; your documents do not leave the country.

Clear separation of roles. We do not perform certification ourselves. Certification is carried out by independent third parties, which lends credibility to our analysis.

Schedule a Quick Check

What We're Working On

The roadmap groups measures into three areas. The assessment will determine which of these are a priority for you.

Organizational

Processes and Evidence That Make a Difference

From risk management and reporting processes to training and technical documentation.

Technically in operation

Network and System Security

From access control and segmentation to logging and vulnerability management—all implemented by the engineers at cross-ING.

Product-related

Compliance of Your Products

From a secure development process to your suppliers' certifications through supplier enablement.

© SecureComply GmbH