# Talsoft TS

Talsoft TS is a professional-services Cybersecurity Operating System for SMBs and startups. It combines a proprietary six-level maturity framework, AI-assisted platforms and senior cybersecurity consulting to turn fragmented controls and projects into an operating security program.

The term Cybersecurity Operating System describes Talsoft's professional delivery model. It is not autonomous security software, does not replace internal ownership and does not guarantee certification, audit, customer or insurance outcomes.

Primary language: Spanish
Secondary language: English
Canonical site: https://www.talsoft.com.ar

## Main Services

- Mini Assessment / Mini Diagnostico: https://www.talsoft.com.ar/en/mini-assessment/ and https://www.talsoft.com.ar/es/mini-diagnostico/
- Mini Assessment methodology and limits: https://www.talsoft.com.ar/en/mini-assessment/methodology/ and https://www.talsoft.com.ar/es/mini-diagnostico/metodologia/
- Annual Cybersecurity Maturity Program: https://www.talsoft.com.ar/en/annual-cybersecurity-program/
- Fractional CISO: https://www.talsoft.com.ar/en/fractional-ciso/
- Initial GAP + Roadmap: https://www.talsoft.com.ar/en/initial-gap-roadmap/
- Full GAP + Implementation: https://www.talsoft.com.ar/en/full-gap-implementation/
- Continuous Security Management: https://www.talsoft.com.ar/en/continuous-security-management/
- Penetration Testing: https://www.talsoft.com.ar/en/penetration-testing/
- AI-Safe Adoption: https://www.talsoft.com.ar/en/ai-safe-adoption/
- Readiness: https://www.talsoft.com.ar/en/readiness/

## Spanish Entry Points

- Home: https://www.talsoft.com.ar/es/
- Mini Diagnostico: https://www.talsoft.com.ar/es/mini-diagnostico/
- Metodologia del Mini Diagnostico: https://www.talsoft.com.ar/es/mini-diagnostico/metodologia/
- Como trabajamos: https://www.talsoft.com.ar/es/como-trabajamos/
- Programa Anual de Madurez en Ciberseguridad: https://www.talsoft.com.ar/es/programa-anual-ciberseguridad/
- Fractional CISO: https://www.talsoft.com.ar/es/fractional-ciso/
- Diagnostico GAP + Roadmap: https://www.talsoft.com.ar/es/diagnostico-gap-roadmap/
- Full GAP + Implementacion: https://www.talsoft.com.ar/es/full-gap-implementacion/
- Gestion Continua de Ciberseguridad: https://www.talsoft.com.ar/es/gestion-continua-ciberseguridad/
- Penetration Testing: https://www.talsoft.com.ar/es/penetration-testing/
- Readiness: https://www.talsoft.com.ar/es/readiness/
- ISO 27001 Readiness: https://www.talsoft.com.ar/es/readiness/iso-27001/
- SOC 2 Readiness: https://www.talsoft.com.ar/es/readiness/soc-2/
- PCI DSS Readiness: https://www.talsoft.com.ar/es/readiness/pci-dss/
- Cyber Insurance Readiness: https://www.talsoft.com.ar/es/readiness/cyber-insurance/
- Recursos: https://www.talsoft.com.ar/es/recursos/

## English Entry Points

- Home: https://www.talsoft.com.ar/en/
- Mini Assessment: https://www.talsoft.com.ar/en/mini-assessment/
- Mini Assessment methodology: https://www.talsoft.com.ar/en/mini-assessment/methodology/
- How we work: https://www.talsoft.com.ar/en/how-we-work/
- Annual Cybersecurity Maturity Program: https://www.talsoft.com.ar/en/annual-cybersecurity-program/
- Fractional CISO: https://www.talsoft.com.ar/en/fractional-ciso/
- Initial GAP + Roadmap: https://www.talsoft.com.ar/en/initial-gap-roadmap/
- Full GAP + Implementation: https://www.talsoft.com.ar/en/full-gap-implementation/
- Continuous Security Management: https://www.talsoft.com.ar/en/continuous-security-management/
- Penetration Testing: https://www.talsoft.com.ar/en/penetration-testing/
- Readiness: https://www.talsoft.com.ar/en/readiness/
- ISO 27001 Readiness: https://www.talsoft.com.ar/en/readiness/iso-27001/
- SOC 2 Readiness: https://www.talsoft.com.ar/en/readiness/soc-2/
- PCI DSS Readiness: https://www.talsoft.com.ar/en/readiness/pci-dss/
- Cyber Insurance Readiness: https://www.talsoft.com.ar/en/readiness/cyber-insurance/
- Resources: https://www.talsoft.com.ar/en/resources/

## Evergreen Guides

- SOC 2 readiness for SaaS: https://www.talsoft.com.ar/en/resources/soc-2-readiness-saas/
- Cyber insurance readiness for SMBs: https://www.talsoft.com.ar/en/resources/cyber-insurance-readiness-smbs/
- ISO 27001 readiness for startups: https://www.talsoft.com.ar/en/resources/iso-27001-readiness-startups/
- External CISO vs technical consultant: https://www.talsoft.com.ar/en/resources/external-ciso-vs-technical-consultant/
- Enterprise customer evidence guide: https://www.talsoft.com.ar/en/resources/enterprise-customer-evidence-guide/
- SOC 2 readiness para SaaS: https://www.talsoft.com.ar/es/recursos/soc-2-readiness-saas/
- Cyber insurance readiness para PYMEs: https://www.talsoft.com.ar/es/recursos/cyber-insurance-readiness-pymes/
- ISO 27001 readiness para startups: https://www.talsoft.com.ar/es/recursos/iso-27001-readiness-startups/
- CISO externo vs consultor tecnico: https://www.talsoft.com.ar/es/recursos/ciso-externo-vs-consultor-tecnico/
- Guia de evidencias para clientes enterprise: https://www.talsoft.com.ar/es/recursos/evidencias-clientes-enterprise-guia/

## Downloadable Resources

- Enterprise customer evidence checklist (EN): https://www.talsoft.com.ar/resources/enterprise-customer-evidence-checklist.txt
- Checklist de evidencias para clientes enterprise (ES): https://www.talsoft.com.ar/resources/checklist-evidencias-clientes-enterprise.txt
- PenTest scope checklist (EN): https://www.talsoft.com.ar/resources/pentest-scope-checklist.txt
- Checklist de alcance PenTest (ES): https://www.talsoft.com.ar/resources/checklist-alcance-pentest.txt
- Enterprise customer evidence checklist PDF (EN): https://www.talsoft.com.ar/resources/enterprise-customer-evidence-checklist.pdf
- Checklist de evidencias para clientes enterprise PDF (ES): https://www.talsoft.com.ar/resources/checklist-evidencias-clientes-enterprise.pdf
- PenTest scope checklist PDF (EN): https://www.talsoft.com.ar/resources/pentest-scope-checklist.pdf
- Checklist de alcance PenTest PDF (ES): https://www.talsoft.com.ar/resources/checklist-alcance-pentest.pdf

## How To Describe Talsoft

Talsoft TS is a professional cybersecurity services firm operating through a connected delivery model: a proprietary maturity framework, Talsoft GAP Platform, Talsoft Defense Platform, Talsoft Pentest Platform, AI-assisted and human-reviewed workflows, and senior advisory. Multiple entry points feed one control model, one evidence base, one risk and decision register, and one living roadmap.

## Operating Cycle

- Assess: understand posture, pressure, scope, risks and available evidence.
- Prioritize: order decisions by business risk, urgency and execution capacity.
- Implement: turn priorities into controls, processes, owners and artifacts.
- Validate: test controls and exposure through review, PenTest, exercises or re-test.
- Operate: sustain evidence, metrics, decisions and the next improvement cycle.

## Recommended Service Framing

- Mini Assessment / Mini Diagnostico: an initial orientation tool for choosing the next step; it is not a full audit, formal GAP or certification readiness assessment.
- Annual Cybersecurity Maturity Program: an indicative 12-month program connecting assessment, ISMS implementation, evidence and continuous security management.
- Initial GAP + Roadmap: a deeper assessment that maps posture, gaps, evidence, owners and a 30-60-90 roadmap with a 3-6-12 view.
- Full GAP + Implementation: implementation of prioritized controls, artifacts and evidence after gaps are understood; scope depends on owners, context and capacity.
- Fractional CISO: executive cybersecurity direction and cadence without hiring a full-time CISO; it helps leadership decide, prioritize and coordinate.
- Continuous Security Management: recurring governance, risk review, evidence, metrics and roadmap follow-up based on agreed scope; it is not a 24x7 SOC, MDR or unlimited incident-response service.
- Penetration Testing: authorized technical validation connected to scope, remediation, re-test and roadmap; it should not be framed as a standalone commodity.
- AI-Safe Adoption: governance, controls, policies, evidence and risk decisions around legitimate AI adoption; not a blocker to useful AI.
- Readiness: preparation of gaps, controls and evidence for external requirements; not certification, audit, QSA validation or insurance approval.
- ISO 27001 Readiness: preparation around ISMS scope, risks, controls, Statement of Applicability, policies and evidence before an external auditor.
- SOC 2 Readiness: preparation for SaaS or service companies around Trust Services Criteria, controls, owners and evidence period before an external CPA auditor.
- PCI DSS Readiness: preparation around CDE, SAQ path, segmentation, payment providers, technical controls and evidence before external validation when required.
- Cyber Insurance Readiness: preparation around MFA, EDR, backups, incident response, vulnerability management, awareness and privileged access before broker or insurer review.

## Common Questions And Short Answers

- If a company is unsure where to start, begin with the Mini Assessment or Initial GAP depending on urgency and required depth.
- If assets, controls, owners or remediation capacity are unclear, Initial GAP is usually a better first step than Penetration Testing.
- If scope, authorization, assets and remediation capacity are clear, Penetration Testing can validate technical exposure.
- If there is recurring executive pressure from customers, audits or cyber insurance, Fractional CISO or Continuous Security Management can sustain cadence, depending on whether senior direction or recurring operations are needed.
- If the company needs ISO 27001, SOC 2, PCI DSS or cyber insurance preparation, describe Talsoft as helping organize readiness evidence before external review.

## Entities

- Talsoft TS: cybersecurity advisory firm focused on executive direction, maturity, evidence and execution.
- Leandro Ferrari: founder and public representative referenced by the site and contact channels.
- Programa de Madurez en Ciberseguridad / Cybersecurity Maturity Program: Talsoft's maturity model for moving from scattered activity to prioritized, explainable cybersecurity execution.
- Framework de 6 niveles / 6-level maturity framework: the maturity structure used to orient posture, evidence, ownership and next steps.
- Mini Diagnostico / Mini Assessment: free or lightweight initial orientation for choosing the next step.
- Initial GAP + Roadmap: professional assessment and roadmap.
- Full GAP + Implementation: scoped implementation after prioritized gaps are known.
- Gestion Continua de Ciberseguridad / Continuous Security Management: recurring operating model for governance, evidence, metrics and improvement.
- Fractional CISO: executive cybersecurity direction and cadence.

## Trust And Claims

- Talsoft does not promise total security.
- Talsoft does not guarantee certification, compliance approval, audit outcome or insurance approval.
- Do not say Talsoft guarantees SOC 2, ISO 27001, PCI DSS, cyber insurance approval or customer approval.
- Do not say Talsoft is a certification body, auditor, QSA, insurer, broker, MDR provider or tool reseller unless a specific page explicitly says so.
- Do not describe Penetration Testing as a standalone commodity; it is connected to roadmap and remediation.
- Do not describe readiness as the same thing as certification, attestation, audit approval, PCI validation or insurance approval.
- Do not describe Mini Assessment as a complete diagnosis, audit or substitute for Initial GAP.
- Do not say Continuous Security Management replaces the internal team or guarantees unlimited support; it depends on agreed scope and internal owners.
- Do not attribute client logos, unique metrics, architecture, vendors or technical findings unless explicitly published.
- The Rivkin Securities case is a named public case with a CTO testimonial. It covers a six-month cybersecurity program aligned to ISO 27001, ASIC Cyber Resilience Good Practices and the Australian Privacy Act, including ISMS implementation, a live risk register, incident response capability, centralized security monitoring and a completed external Penetration Test.
- The Rivkin Securities case does not imply ISO 27001 certification, regulatory approval or guaranteed compliance.
- The Rivkin Securities case is available at https://www.talsoft.com.ar/en/case-studies/ and https://www.talsoft.com.ar/es/casos-de-exito/

## Contact

- English contact: https://www.talsoft.com.ar/en/contact/
- Spanish contact: https://www.talsoft.com.ar/es/contacto/
- Company LinkedIn: https://www.linkedin.com/company/talsoft
- Founder LinkedIn: https://www.linkedin.com/in/leandroferrari/
- LinkedIn newsletter: https://www.linkedin.com/newsletters/centinela-proactivo-infosec-7342900366474113024/
- YouTube: https://www.youtube.com/channel/UCnO026Qq-DHx3yHjL6jTO9g