PKF Polska and GAMP establish a strategic partnership in cybersecurity

PKF Polska and GAMP Sp. z o.o. have signed a letter of intent to establish a strategic partnership in the areas of cybersecurity, digital resilience, and regulatory compliance.

The document was signed by Tomasz Janas, Managing Director of PKF Advisory at PKF Polska, and Piotr Gawara, CEO of GAMP Sp. z o.o.

The aim of the partnership is to combine PKF Polska’s advisory and audit expertise with GAMP’s operational security services. The parties intend to jointly deliver comprehensive solutions that bridge regulatory requirements with organizations’ real capabilities to detect and respond to threats.

Responding to growing regulatory requirements

The partnership addresses rapidly increasing regulatory demands, particularly those arising from:

• the NIS2 Directive,
• the Act on the National Cybersecurity System,
• the DORA Regulation,
• ISO 27001 and ISO 22301 standards.

Both parties emphasize that many organizations focus primarily on formal compliance, which often results in documentation that does not translate into real operational resilience. The partners’ intention is to close this gap by delivering solutions that ensure both compliance and measurable effectiveness of security mechanisms.

Synergy of advisory and operational capabilities

As part of the collaboration:

PKF Polska will be responsible for:

• risk analysis,
• design of information security management systems,
• preparing organizations to meet regulatory requirements,
• supporting management boards in governance, compliance, and audit.

GAMP will contribute expertise in:

• operational cybersecurity,
• monitoring and threat detection,
• log management,
• incident response,
• business continuity and disaster recovery solutions.

Joint market offering

The parties plan to develop a joint offering including, among others:

• implementations aligned with NIS2 and national cybersecurity system requirements,
• solutions supporting the operational resilience of financial institutions in the context of DORA,
• preparation for ISO 27001 and ISO 22301 certification,
• services for management boards, including a CISO as a Service model integrated with 24/7 security monitoring (SOC).

An important direction of the collaboration will also be the development of services for sectors critical to the economy and national security, such as critical infrastructure, utilities, public administration, as well as industrial and OT environments.

Next steps

The parties declare their intention to jointly develop products and services, conduct sales and marketing activities, and deliver projects in a partnership model—both through mutual service referrals and joint delivery.

The letter of intent constitutes a declaration of cooperation and a foundation for further discussions aimed at developing a detailed operating model and commercializing the joint offering.