istm.nl

What It Is

ISTM (Interim Solutions That Matter) is a risk management and digital security consultancy based in the Netherlands. Its core positioning is not selling security software, but helping organizations improve digital security, compliance, anti-fraud, and integrity governance through interim management and project management. The website highlights more than 20 years of experience in areas such as digital security, compliance, fraude en integriteit, while founder Johan van Slooten has over 25 years of relevant professional background.

Core Capabilities and Assessment

In terms of protection scope, ISTM covers information security governance and organizational resilience building, including information security baseline assessments and roadmaps, NIS2 practical guidance, ISO 27001/ISO 27701 support, and employee awareness training. These services lean more toward GRC and security management system development, rather than endpoint protection, WAF, EDR, or vulnerability scanning platforms.

For delivery model, the website explicitly mentions interim and projectmanagement execution, making it suitable for temporarily strengthening security/compliance teams, leading complex projects, or driving organizational change. Compliance is one of its key focus areas, covering NIS2, ISO 27001/27701, audits, and preparation for regulatory processes. In terms of management and alerting, ISTM can provide policies, processes, reports, controls, and training, but it does not mention SOC, SIEM, real-time alerting, or managed detection and response capabilities. Integration capabilities are only described in relation to data and process optimization, with no clear explanation of integration with security tools or IT systems.

Pricing and Business Transparency

The website does not disclose pricing models, project quotes, payment methods, or typical service durations. Engagements are likely customized by project after communication via phone, email, or contact form. For buyers with a fixed budget who want to compare options quickly, this increases the upfront evaluation cost.

Pros, Cons, and Best Fit

The main advantage is its service coverage across digital security, compliance, fraud, and integrity, making it suitable for European organizations that need to implement NIS2, ISO 27001/27701, or establish compliance programs. Its project-based and interim management model is also a good fit for organizations lacking an internal security lead or needing temporary expert support. The drawbacks are limited public information, lack of technical products, automated monitoring, SLA details, detailed customer cases, and disclosure of its own certifications.

Access from China and Alternatives

Access from China cannot be determined from the available website content, and the service is clearly oriented toward the Dutch-speaking market. Chinese companies considering cooperation should confirm language support, time zone coordination, payment methods, and remote delivery options. If the goal is China-local compliance or classified cybersecurity protection work, domestic cybersecurity consulting and compliance providers should be prioritized. If the goal is EU NIS2 or ISO system implementation, ISTM can be compared with the Big Four accounting firms and local European ISO/NIS2 consultants.