What Ataya and Partners does

Ataya and Partners is a Brussels-based management consulting firm specializing in data protection, cybersecurity, and IT & digital governance. Founded approximately 25 years ago by Prof. Georges Ataya, the firm operates with a team of 30 highly specialized consultants holding credentials such as CISSP, CISM, CISA, CRISC, and COBIT, several of whom have served as CISOs at major Belgian institutions and hold leadership roles in industry bodies including the Cybersecurity Coalition Belgium and ISACA Belgium. Its core service portfolio is structured around three As-A-Service offerings — CISO AAS, DPO AAS, and CIO AAS — providing on-demand executive advisory for organizations lacking full-time security, privacy, or IT leadership, complemented by tiered cybersecurity maturity assessments (priced from €2,000 to €5,500 depending on enterprise size).

The firm monetizes through professional services, training, and executive recruitment. Training is delivered through the Ataya & Partners Academy, anchored by the CyFun Basic Practitioner course (€1,490 per participant) and three 12-week D4S modules that form part of the Digital4Security Master's programme co-developed with Solvay Brussels School and a 35-partner EU consortium under a €20M DIGITAL Europe grant. Revenue is generated from recurring advisory retainers, project-based assessments, training fees (including ECTS-credit-bearing modules), and staffing commissions routed through Hightech Partners and Hoffman Associates.

Since November 2023, Ataya has operated as part of HTP Group Holding, a merged entity with Hightech Partners and Hoffman & Associates that forms a top-30 EMEA executive search and leadership consulting group. The firm serves enterprise organizations, Belgian and EU public-sector entities (Walloon Parliament, Brussels Public Hospitals), healthcare providers, and SMEs — the latter via the Walloon region's Chèque-Entreprise Cybersécurité subsidy programme. Geographic focus is Belgium-primary with pan-EU reach delivered through consortium participation and HTP Group's continental offices.

Name

Ataya and Partners

Legal name

Ataya and Partners

Website

https://atayapartners.com

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

11–50 employees

Short description

Brussels-based management consulting firm delivering CISO, DPO, and CIO As-A-Service advisory alongside cybersecurity maturity assessments and accredited training (CyFun, D4S modules) to enterprise, government, healthcare, and SME clients across Belgium and EMEA.

Ownership category

akta.pro rank

Product category

Cybersecurity Management Consulting

NAICS

Management Consulting Services (54161), Other Scientific and Technical Consulting Services (541690)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Enterprise Security Strategy & Program Advisory (BPAKADAA)

akta.pro secondary industry

Strategy & IT Advisory (BPAEAAAA)

Keywords

• Cybersecurity consulting services
• Data protection advisory
• IT governance consulting
• CISO advisory services
• Cybersecurity training programs

Headquarters

HQ city

Brussels

HQ country

Belgium

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. Management Consulting Services: Core revenue from cybersecurity, data protection, and IT governance consulting engagements including CISO as a Service (CISO AAS), DPO as a Service (DPO AAS), and CIO as a Service (CIO AAS). These are typically ongoing advisory relationships with enterprise clients requiring specialized cybersecurity leadership.
2. Training and Education Programs: Revenue from professional training programs including CyFun Basic Practitioner courses, Cybersecurity Auditing, CISO Crisis Communication, and Cybersecurity Culture Strategy Leadership modules. Programs offer certificates and academic credits (ECTS).
3. Staffing and Executive Search: Collaboration with Hightech Partners and Hoffman Associates for executive recruitment services in IT and cybersecurity domains, providing staffing solutions to clients.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

Ataya & Partners is a management consulting firm that delivers CISO, DPO, and CIO As A Service (AAS) advisory engagements, a Cybersecurity Maturity Assessment, and a portfolio of certified training courses (CyFun Basic Practitioner and D4S modules) covering cybersecurity governance, data protection, and IT & digital governance. Services are structured around an ASSESS, PLAN, BUILD, RUN, GOVERN methodology and address regulatory frameworks including NIS2, DORA, GDPR, and ISO 27001.

Product overview

Ataya & Partners operates as a cybersecurity management consulting firm rather than a software product company. Their service portfolio comprises three core As-A-Service offerings (CISO AAS, CIO AAS, and DPO AAS) providing executive advisory services in cybersecurity strategy, IT governance, and data protection compliance respectively. These are complemented by a Cybersecurity Maturity Assessment with tiered pricing (Small at €2,000, Medium at €3,500, Big Enterprise at €5,500). Their training division, Ataya & Partners Academy, delivers the CyFun Basic Practitioner two-day course (€1,490) for NIS2/CyberFundamentals compliance, and three 12-week D4S modules (Cybersecurity Culture, Strategy & Leadership; CISO Crisis Communication; Cybersecurity Auditing) that form part of the Digital4Security European Master's programme which awards 5 ECTS credits. The Executive Master in Cybersecurity Management is delivered in partnership with Solvay Lifelong Learning. All services are delivered by approximately 30 specialized consultants with over 25 years of combined experience.

Differentiator

Problem solved

Functional benefit

Brands

• Ataya & Partners Academy: The training and education division of Ataya & Partners offering cybersecurity certification programs including CyFun Basic Practitioner, D4S Cybersecurity Auditing, D4S CISO Crisis Communication, and D4S Cybersecurity Culture Strategy Leadership courses.

Products and services

• CISO As A Service (CISO AAS)
• CIO As A Service (CIO AAS)
• DPO As A Service (DPO AAS)
• Cybersecurity Maturity Assessment
• CyFun Basic Practitioner Training
• D4S Cybersecurity Culture, Strategy & Leadership Module 12-week online training module covering CISO role, culture and governance practices, threats/vulnerabilities/controls, and building a CISO organization. Awards 5 ECTS credits. Part of the Digital4Security European Master's programme.
• D4S CISO Crisis Communication Module 12-week online training module focused on crisis communication, regulatory notification, and reputation management for cybersecurity leaders. Part of the Digital4Security European Master's programme.
• D4S Cybersecurity Auditing Module 12-week online training module covering third line of defence auditing, audit planning, fieldwork, and reporting. Awards 5 ECTS credits. Part of the Digital4Security European Master's programme.
• Executive Master in Cybersecurity Management Academic Master's programme operated at Solvay Lifelong Learning under licence from Ataya & Partners, aligned with ENISA's European Cybersecurity Skills Framework (ECSF). Over 640 participants have graduated from this Digital Governance and Trust education programme.

Quantifiable outcome

• 640+ professionals trained through Digital Governance and Trust education programs
• +2 more outcomes

Named customers3 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

15 partnerships are on record, tiered core and minor.

• HTP Group Holding (Hightech Partners + Hoffman + Ataya & Partners)coreStrategic or Co-development Partner · 6 November 2023Three leading Belgian firms - Hightech Partners (executive search), Hoffman (leadership advisory), and Ataya & Partners (cybersecurity advisory) - joined forces under HTP Group Holding. The newly formed group becomes a top 30 Executive Search and Leadership Consulting firm in EMEA with 24 partners and presence in Brussels, France, Germany, Italy, Netherlands, Norway and other regions.
• Solvay Brussels School / Solvay Lifelong LearningcoreStrategic or Co-development PartnerProud partners delivering one of Europe's leading training courses in information security. Ataya & Partners collaborates with Solvay on the Executive Master in Cybersecurity Management. Prof. Georges Ataya serves as Academic Director. The partnership involves Digital4Security Master's program development and CyberHubs project participation.
• Digital4Security ConsortiumcoreStrategic or Co-development PartnerA €20 million EU-funded project under the DIGITAL Europe programme with 35 partners from 14 EU countries. Professor Ataya developed specifications for three modules: Cybersecurity Culture and Leadership, Cybersecurity Auditing, and The CISO and Crisis Communication. The program equips SMEs with cybersecurity management, regulatory compliance, and technical skills.
• CyberHubs ConsortiumminorStrategic or Co-development PartnerEuropean Network of Cybersecurity Skills Hubs - a 3-year initiative establishing seven Cybersecurity Skills Hubs in Belgium, Estonia, Greece, Hungary, Lithuania, Slovenia, and Spain. Belgian team led by Agoria with Solvay Lifelong Learning and Howest University. Funded by European Commission under Erasmus+ programme and led by DIGITALEUROPE.
• COcyber ConsortiumminorStrategic or Co-development PartnerA multidisciplinary team including ULB, EOS, The Lisbon Council, AUSTRALO, and EIT Digital working on enhancing exchange and collaboration between cybersecurity civilian and defence spheres. Ataya & Partners directs deliverables in collaboration with researchers.
• European Security and Defence College (ESDC)minorStrategic or Co-development PartnerAtaya & Partners and SBS-EM accepted as full members of ESDC. Contributed to SOC (Security Operations Center) education session and developing CISO course for delivery to ESDC members. ESDC provides EU-level training in Common Security and Defence Policy.
• Hightech PartnerscoreChannel Partner/ Reseller/ DistributorLeading executive search firm collaborating with Ataya & Partners in executive recruitment and leadership advice, particularly for digital transformation and cybersecurity leadership roles.
• Hoffman AssociatescoreChannel Partner/ Reseller/ DistributorTrusted leadership advisor, executive search and interim management company serving clients across all sectors. Partnered with Ataya & Partners to address top talent shortage in executive and board-level positions.
• Cybersecurity Coalition BelgiumminorStrategic or Co-development PartnerGeorges Ataya co-founded the Cybersecurity Coalition Belgium and serves as Vice-Chair. The coalition brings together cybersecurity professionals and organizations in Belgium.
• HTP GroupminorStrategic or Co-development PartnerInstitutional partner for Digital4Security and training programs. Part of HTP Group Holding ecosystem.
• European Cybersecurity Competence Centre (ECCC)minorStrategic or Co-development PartnerECCC is involved in the Digital4Security programme and CyberHubs project, providing European-level coordination for cybersecurity skills development.
• ECSO (European Cyber Security Organisation)minorStrategic or Co-development PartnerECSORG is a consortium partner for Digital4Security and collaborator on the European Cybersecurity State of the Profession Survey.
• AgoriaminorStrategic or Co-development PartnerBelgian technology industry association and partner in CyberHubs project, leading Belgian team coordination.
• BECI (Brussels Enterprises Commerce and Industry)minorStrategic or Co-development PartnerInstitutional partner for Digital4Security programme representing Brussels business community.
• Cyberboards.euminorStrategic or Co-development PartnerInstitutional partner for Digital4Security programme focusing on cybersecurity certification boards.

Scale indicators5 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• NVISO: Belgian-headquartered cybersecurity consulting firm with a comparable offering: advisory, managed security, and training services delivered across the Benelux and broader EMEA. NVISO competes most directly for CISO-as-a-Service and technical cyber advisory mandates that Ataya targets, and shares the Belgian cybersecurity ecosystem with overlapping talent pipelines.
• Orange Cyberdefense: European cybersecurity services arm of Orange with broad managed security, consulting, and threat intelligence across multiple countries. Competes for EMEA enterprise CISO-level mandates and offers a similar advisor-plus-services portfolio to Ataya.
• Kudelski Security: European-headquartered (Swiss) cybersecurity services firm offering advisory, managed detection and response, and incident response across EMEA. Comparable as a European peer for enterprise CISO advisory and cyber risk consulting work.
• Toreon: Belgian cybersecurity consulting firm specializing in application security, threat modeling, and security awareness training. Toreon competes for the same Belgian enterprise and public-sector clients and offers overlapping training and advisory services.
• Approach Cyber: Belgium-based cybersecurity consultancy offering GRC advisory, ISO 27001/NIS2 readiness, penetration testing, and security awareness — directly overlapping with Ataya's CISO AAS and DPO AAS services for Belgian and EU enterprise clients.

Broad incumbents

• EY (Ernst & Young) Cybersecurity Consulting: Global Big Four professional services firm with a dedicated cybersecurity consulting practice — Ataya's founder is a former EY IT director/consultant. EY competes for the same enterprise and public-sector CISO/DPO advisory mandates at greater scale and brand recognition.
• PwC Cybersecurity & Privacy: Global Big Four firm with established cybersecurity and GDPR/DPO advisory capabilities. PwC is a competing advisor to the same enterprise and regulated-entity clients that Ataya serves, while also offering broader transformation services Ataya does not.
• Deloitte Cyber Risk Services: Global Big Four firm with a large cyber risk advisory practice spanning strategy, GRC, identity, and managed services. Competes with Ataya for large-enterprise and EU-regulated entity advisory work at materially greater scale.

Emerging players

• SANS Institute: Global cybersecurity training and certification organization operating across EMEA. SANS competes with Ataya's Ataya Academy for CyFun, D4S, and CISO training cohorts, and is an indirect competitor for talent pipelines of certified cybersecurity professionals.

Others

• Solvay Lifelong Learning (Solvay Brussels School): Academic partner that jointly delivers the Executive Master in Cybersecurity Management with Ataya under license. It is not a competitor but a co-developer of the training IP and channel into enterprise CISOs, and is listed here to represent the closest thematic/ecosystem link to Ataya's training business.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/ataya-and-partners

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Ataya and Partners