asturias-conseil.com

What It Is

VONA is an independent digital strategy and cyber governance consulting firm. Its website positions the company as a consultancy focused on “risk management, cybersecurity, and digital governance strategy,” serving enterprises and the public sector. VONA helps clients make their digital transformation more secure, better governed, and more value-driven. It is not a traditional security software or hardware vendor; rather, it is a cybersecurity services provider focused on management consulting, governance consulting, and project implementation support.

Core Capabilities

Based on the publicly available content, VONA focuses on protecting information assets, reducing risk, and improving digital governance capabilities. Typical areas include cybersecurity governance, SSI program management, Security by Design, embedding security processes into agile projects, KPI development, digital transformation support, and creating value from data assets. Its financial-sector case study shows that VONA first diagnoses existing processes through interviews, document analysis, and tool assessment; then identifies issues, designs Agile-compatible security processes, works with SSI teams to build an evolving project security support tool, and finally uses pilot projects to manage change and scale the approach.

Pricing

The website does not disclose standard packages, subscription pricing, or day-rate fees. Given its emphasis on “sur mesure” customization and its project-based case studies, VONA is more likely to use a consulting pricing model based on project scope, consultant effort, and delivery objectives.

Pros and Cons

The main advantage is its focused positioning, making it suitable for organizations that need security governance, risk management, and digital transformation oversight. Its case studies cover complex sectors such as finance, the public sector, and transportation, and its methodology appears fairly complete, including diagnosis, target process design, tool development, pilots, and KPI management. The downside is that public information does not show specific security products, detection capabilities, managed services, SLAs, compliance certifications, or pricing. For customers looking to buy technical tools such as vulnerability scanning, EDR, or SOC alerting, VONA is not a direct substitute.

Who It Is For

VONA is better suited to medium and large enterprises, public-sector organizations, financial institutions, transportation companies, and organizations with complex IT governance structures. It is especially relevant for teams that want to embed security into agile development, establish SSI governance mechanisms, strengthen security controls for digital transformation, or improve security project management capabilities.

Access from China

The available content does not provide information about services for China, local nodes, language support, or accessibility from China, so actual availability is unknown. Chinese companies considering cooperation should further confirm remote delivery options, language support, contracting entity, and cross-border data compliance requirements.