Shall we talk?
Choose a subject and write directly to our team.
Or write to
Cyber Consulting, since 2018
We support companies with their security, privacy and governance challenges. And we help professionals grow through courses, certifications and mentoring.
Consulting
We understand each company’s context, identify what matters and help turn plans into action.
We raise security maturity, reduce risk exposure and prepare the way to certification, with audit ready evidence.
What we deliver
References
We help your company use AI safely, responsibly and in compliance, without slowing innovation.
What we deliver
References
LGPD and GDPR compliance through a privacy program that works day to day and holds up under audit.
What we deliver
References
Workable compliance programs, traceable risk management and business continuity, including for regulated markets.
What we deliver
References
Education & Culture
From the first certification to the next career step, we create courses and learning experiences that make sense in practice.
EXIN partners since 2019
We have partnered with the international certification body EXIN since 2019. Our courses meet EXIN requirements for content, workload and instructor certification.
See EXIN courses and certifications
Paths
Cyber Cultura original courses
For companiesIn-company training, talks and awareness programs for whole teams.
Explore courses and certificationsNews
Launch
Cyber Cultura’s preparatory course for the EXIN AISP certification arrives in Portuguese. Security applied to artificial intelligence, from fundamentals to practice.
Course launch: November 3, 2026
Starts in
Course available
Preparatory course
R$ 298.00
15% OFF the AISP exam voucherUntil 11/30/2026
Tell me moreEach path is a learning journey: individual certifications that add up to an EXIN professional title. They all start from the same foundation.
AISS
AI Security
AI Security Specialist: the recognition for the path made of ISFS, AIF and AISP. AISP is the individual certification that completes the route.
Route
AICO
AI Governance
Artificial Intelligence Compliance Officer: the path that combines ISFS, PDPF and AICP.
Route
ISO
Information Security Management
Information Security Officer, based on ISO/IEC 27001: the path that combines ISFS, PDPF and ISMP.
Route
DPO
Data Privacy
Data Protection Officer: the path that combines ISFS, PDPF and PDPP.
Route
Our own technology
We build tools that keep the work going: organizing information, tracking risks and turning decisions into action.
Discover Galáxia(opens in a new tab)Each system solves one management domain end to end, and can be bought on its own. But they were all born to work together, orbiting the same core: your company's context. Hover to see what each one shares.
Select a constellation to see what it consumes from and contributes to the shared context.Tap a constellation to see what it consumes from and contributes to the shared context.
Inherits
Context & Scope; processes and areas (to locate use cases and owners); the control library from Sirius (for treatment plans); policies from Cefeu (an AI policy tied to real controls); the committee structure from Polaris (AI governance anchors itself in corporate governance).
Contributes
The inventory of AI use cases, which then exists for Sirius (security risk over those assets), for Lyra (data processing in AI) and for Delphinus (AI suppliers to monitor); and the AI training needs, delivered in Andromeda with evidence of completion.
Inherits
Context & Scope; the inventory of systems (including AI use cases from Orion); processes and areas to give risks and controls an address; policies published in Cefeu.
Contributes
The security control library, the foundation Cassiopeia uses in treatments, Cefeu links to policies, Orion references in AI risk, Delphinus uses as a baseline to assess third parties and Polaris connects to corporate controls; plus awareness needs, delivered in Andromeda.
Inherits
Context & Scope; processes and areas (every processing activity is born with an organisational address); the inventory of systems (where the data lives, including AI use cases from Orion); controls from Sirius (the security measures cited in a DPIA are real controls, not loose text).
Contributes
The personal data map, which informs privacy risk in Cassiopeia, contract clauses and third-party assessments in Delphinus, and AI use cases involving personal data in Orion; plus privacy training needs, delivered in Andromeda.
Inherits
Context & Scope; the consolidated risk view from Cassiopeia (the executive agenda comes from real risks); policies from Cefeu (corporate policies and guidelines with immutable approval); indicators from the domains (Sirius, Lyra, Orion) for an integrated executive view.
Contributes
The governance structure, roles, authority limits and committees that every other system references: the risk committee in Cassiopeia, the AI committee in Orion, the ISMS roles in Sirius and the responsibilities of the privacy programme in Lyra all come to exist in one official place.
Inherits
Context & Scope (drafts are born with the company's reality); processes and areas (applicability per audience); controls from Sirius and framework requirements (each policy declares what it covers); structures from Polaris (approval authority reflects real governance).
Contributes
A living policy framework, documentary evidence that Sirius uses in the ISMS, Orion in the AIMS, Lyra in the privacy programme, Polaris in corporate guidelines and Delphinus in contractual requirements for third parties; plus direct input for Andromeda's learning paths: training people on the real, published, in-force policy.
Inherits
Context & Scope; processes and areas (every risk is born with an address); controls from Sirius (treatments point to real controls, not to promises); inventories from Orion, Lyra and Delphinus (AI, privacy and third-party risk enter the consolidated view); committees from Polaris (deliberation happens in the official structure).
Contributes
The consolidated risk view, the single map that sets priorities across every other domain and sustains the conversation with the board and auditors.
Inherits
Context & Scope; the inventory of systems (which suppliers support which critical systems); controls from Sirius (the assessment baseline is yours, not a generic questionnaire); the data map from Lyra (which third parties process personal data); use cases from Orion (which third parties supply AI).
Contributes
The risk view of the third-party chain, which feeds Cassiopeia's consolidated map and closes the external link of the evidence chain.
Inherits
Context & Scope; processes and areas (the target audiences already exist); policies from Cefeu (training is born from the real, published, in-force policy); maturity gaps and risks from Sirius, Lyra and Orion (learning paths address the real gaps, not generic topics).
Contributes
The evidence of training and culture, the proof of awareness that the ISMS (Sirius), the privacy programme (Lyra), the AIMS (Orion) and corporate governance (Polaris) require in audits and certifications; completed in Andromeda, the evidence exists for all of them.
About Us
Founded in May 2018 as an information security consulting and training company, Cyber Consulting has expanded into data privacy, AI governance and corporate governance.
Team
José Wagner BungartCISO, DPO and governance consultant for security, privacy and AI
Caio Pezatti MartinLawyer, digital law and data protection
Márcia BungartPsychologist, strategic support for consulting and mentoring
Rafael MatjasApplied artificial intelligence specialistTell us about your challenge or your next step. Write a few lines right here and the reply comes to your email.
