Family 01
Information security
ISO/IEC 27001 ISMS, gap assessments, security audits and business continuity.
01 / 03
+15successful certification projects
5countries with certified clients
+25long-standing clients
+1200hours of training delivered
2017Founded in Uruguay
who we are
Your partner in cybersecurity, not another vendor
SORT Consulting is a Uruguayan firm founded in 2017, highly specialised in information security and cybersecurity. We understand that for many organisations cybersecurity is hard to cover without specialist support.
That is why we take a holistic approach: we work as your partner, continuously and closely, to build security solutions that are current and made to measure.
01
Quality
Services that add real value and fully meet the client’s needs and expectations.
02
Integrity
Professional ethics and the highest standards of conduct in everything we do.
03
Innovation
We innovate in processes, services and solutions to stay ahead of the curve.
04
Excellence
We help our clients reach the highest international standards — the state of the art in each field.
our services
Management, compliance and trust from one team
Family 02
IT governance and management
Technology governance framework and service management systems under ISO/IEC 20000.
Family 03
Compliance and integrity
Anti-bribery and compliance management systems, focused on culture and reporting.
Family 04
Supply chain
Logistics chain security and preparation for Authorised Economic Operator status.
Family 05
AI governance
Artificial intelligence management systems certifiable under ISO/IEC 42001.
service model
A security model on three levels
Essential
ISMS management
For organisations looking to implement and sustain an ISMS that stays current and auditable.
- ISMS implementation and management (ISO/IEC 27001)
- Security Committee and liaison with technical teams
- Risk management and treatment plan
- Audit support and executive reporting to the Board
Advanced
Threat intelligence and attack surface
For organisations moving from a reactive to a proactive posture: anticipating threats and knowing what they actually expose on the internet.
- Everything included in Essential
- Contextualised threat intelligence (SORT ThreatLens)
- Urgent alerts and monthly executive report
- Attack surface monitoring (SORT ASM)
Complete
The human factor, solved
For organisations that treat security as one system, where technology, processes and people are managed with the same rigour.
- Everything included in Advanced
- Security awareness platform (SORT SecurityAcademy)
- Named certification and training metrics
- Controlled phishing and social engineering
why choose us
A track record behind every project
Certifications supported in Uruguay, the United States, Panama, the Bahamas and Puerto Rico.
01
Specialists
Exclusive focus on information security, with ISO 27001 Lead Auditors and CISSP certification.
02
Proximity
Continuous, tailored support; we join your Security Committee as one more member.
03
Complete approach
Management, threat intelligence, attack surface and the human factor in a single model.
04
Our own platform
SORT Redmine holds the management system up and makes day-to-day compliance visible.
05
Regional reach
Certifications supported in Uruguay, the United States, Panama, the Bahamas and Puerto Rico.
our experience
Case studies
Healthcare
Pioneers in the healthcare sector
The first institution in its sector in Uruguay to certify ISO/IEC 27001, with no non-conformities.
Financial
Global financial group
ISMS implemented at head office and at a critical subsidiary, across two Caribbean jurisdictions.
Logistics
Leading postal and logistics operator
The first certified logistics operator in the country, with the ISMS maintained continuously.
Technology
Certified electronic invoicing in Panama
One of the country’s first ISO/IEC 27001:2022 certifications, achieved in record time.
our clients
Some of the brands that trust us
in our clients’ words
Testimonials
The SORT team supported us throughout the implementation of our Information Security Management System with great professionalism and solidity, and we achieved certification. We still work with them today; they are a cornerstone of our ongoing security framework.
Juan VoelkerDirectorTranslated from SpanishSORT has been with us since 2017; their team is part of the organisation by now. They earned our trust through very close support that allowed us to transform the culture of the organisation and establish security as a core pillar.
Fernando RamaDirectorTranslated from SpanishSORT helped us consolidate our Information Security Management System and achieve certification in record time. Their advice adds value to the development process of eFacturapty.
Sebastián NoguezPresidentTranslated from SpanishWe have relied on SORT’s advice since 2017 across several key processes. Together we consolidated our IT Service Management processes by implementing Redmine, and we are now developing our Information Security Plan, in which they play an active role as members of our Security Committee.
María de la Paz ArocenaHead of ITTranslated from Spanishinsights
Standards and regulation, explained
We published our report on AI governance
Eighteen pages covering the risk assessment, the applicable regulatory framework and the ISO/IEC 42001 governance model. Free download.
Read moreGoverning AI with rigour: what ISO/IEC 42001 actually requires
The first certifiable standard for artificial intelligence management systems does not ask you to slow AI down: it asks you to know what is being used, who answers for it, and what happens when it fails.
Read more
ISO 37001 and 37301: two standards, one system
How to design an integrity and compliance framework without duplicating structures, committees or documentation. What the two standards share and where they diverge.
Read morefrequently asked questions
What people ask us before we start
The answers are complete below, with nothing asked in return. If your question is not here, write to us.
How long does an ISO/IEC 27001 implementation take?
It depends on scope and starting maturity, but a typical project runs 8 to 14 months up to the certification audit. The gap assessment audit lets us refine that estimate with real data within the first few weeks.
Is the work done on site or remotely?
The methodology is blended: visits to the organisation (on site) combined with remote work. Engagements can start immediately.
What do you need from our team?
Timely answers from your internal counterparts. In our experience no more than two or three days should pass between a request for information or a document review and its response: it is the single variable that most affects the real duration of the project.
Is supporting software included?
Yes. Every activity is supported by SORT Redmine, our platform for administering and controlling the management system, available on premises or in the SORT cloud.
How is the investment structured?
In four independent components: the initial gap assessment audit, the monthly implementation service at the chosen level (Essential, Advanced or Complete), the internal audits, and the SORT Redmine platform. We send the detailed breakdown in the formal proposal.
Do you work outside Uruguay?
Yes. We have supported certifications in Uruguay, the United States, Panama, the Bahamas and Puerto Rico, with the same methodology and blended approach.