Business continuity
Keep running when IT fails.
KSC audit deadline · 3 April 2028
540
DAYS LEFT
Our services
NIS2 / KSC audits
Get audit-ready and pass.
DORA compliance
For banks and insurers.
Services
Six engagements.
KSC art. 15 security audit
3–6WEEKS
ISO 27001 / ISO 22301 internal audit
1–3WEEKS
BC/DR programme set-up or recovery
3–9MONTHS
DR and crisis exercise design
2–4WEEKS
NIS2 / KSC readiness assessment
2–4WEEKS
DORA resilience review
3–6WEEKS
Certified where it counts.
- CBCI
- ISO 27001 Lead Auditor
- DRI
- PM²
How we work
- 1
Assess
- 2
Plan
- 3
Implement
- 4
Validate
Founder
“When systems fail, the question isn’t whether you have a plan. It’s whether it works.”
Erwan Chadli · IT disaster recovery & business continuity
I help organisations keep critical services running when technology fails. After five years at Frontex, the EU’s border and coast guard agency, I founded R1 Solutions in Warsaw. Today I lead disaster recovery planning and testing for a major pan-European retailer.
- Paris Fire Brigade
- DG ECHO
- Frontex
- R1 Solutions
More about me
My path into resilience began on the ground, as a first responder with the Paris Fire Brigade. That’s where I learned that preparation only counts if it holds under pressure. I then moved into European security policy, working with DG ECHO and later spending five years at Frontex. There I worked in security and on the ETIAS programme, then coordinated business continuity and disaster recovery within the agency’s digital services.
In 2026 I founded R1 Solutions, a Warsaw-based consultancy focused on IT disaster recovery, business continuity and security governance. I currently lead a technology resilience programme for a major pan-European retailer, covering recovery planning, executive steering and live DR testing. I’m also developing an approach to two emerging risks: keeping operations running when AI services fail, and functioning without IT during a cyberattack.
I work with ISO 22301, ISO 27001, ISO 31000, DORA and NIS2. I trained at the College of Europe, the Université libre de Bruxelles, the University of Porto and Harvard Kennedy School, and I work in French, English and Portuguese.
- ISO 27001 Lead Auditor · BSI
- DRI BCP IT/DR
- PM²
Questions
What is a KSC audit?
Poland’s amended Act on the National Cybersecurity System (KSC) implements the EU NIS2 Directive. Essential entities must have their information security system audited: the first audit is due by 3 April 2028, then at least every three years. R1 prepares you for it and runs it with a certified partner auditor.
Does NIS2 / KSC apply to my organisation?
It covers essential and important entities in sectors such as energy, transport, health, drinking water, digital infrastructure and manufacturing. Your status depends on sector, size and activity, so every readiness assessment starts with a scope check.
What is DORA?
The EU Digital Operational Resilience Act has applied since January 2025 to banks, insurers, payment and investment firms and their critical ICT providers. It sets rules for ICT risk management, incident reporting, resilience testing and third-party risk.
What is business continuity and disaster recovery (BC/DR)?
Business continuity keeps critical services running during a disruption. Disaster recovery restores IT systems and data afterwards. Together they cover business impact analysis, recovery time objectives, recovery plans and regular tests.
How long does a NIS2 / KSC readiness assessment take?
Typically two to four weeks: scope check, gap analysis and a prioritised roadmap. A KSC art. 15 security audit with a certified partner auditor typically takes three to six weeks.
Which languages do you work in?
Engagements run in English, French or Portuguese, for organisations in Poland and across the EU.