Pragmatic and clear
We translate complex requirements into clear, concrete actions and documentation that your teams can understand and maintain.
Xiphos d.o.o. helps organisations build practical security and resilience programs that stand up to audits, real incidents and regulatory scrutiny.
Xiphos d.o.o. is led by business security and resilience consultant Darie Maric, with more than 25 years of experience in information security, cybersecurity, business continuity, risk and incident management.
Over the years thousands of participants have attended our trainings and workshops, and many organisations have achieved or maintained certification and compliance with our support.
Our mission is to help organisations turn regulatory pressure and complex security requirements into clear, achievable and sustainable practices that protect people, assets and business continuity.
We want small and medium-sized organisations to operate with the same confidence in their security and resilience as large global enterprises. Xiphos aims to be a trusted partner for organisations that want to understand their risks, meet their obligations and stay operational in an unpredictable world.
We translate complex requirements into clear, concrete actions and documentation that your teams can understand and maintain.
We work closely with leadership and internal teams, aligning security and resilience measures with your business strategy and culture.
Our work aligns with recognised standards and regulations such as ISO 27001, ISO 22301, NIS2, DORA and GDPR, without losing sight of your real risks.
Training and awareness are central to our approach so that your people understand not only what to do, but why it matters.
We set clear milestones and prepare templates and evidence so you can demonstrate progress to auditors and leadership with confidence.
We tailor workshops, coaching and deliverables to your team's capacity, keeping momentum without overwhelming day-to-day operations.