# BSD Management

> BSD Management (Business Solutions Development) is a cybersecurity consulting firm based in Chișinău, Republic of Moldova. The team holds internationally recognised certifications including CISA, CISM, CISSP, CDPSE, CRISC, ISO 27001 LA, ISO 27005 LRM, ITIL, TOGAF 9, and CEH.

## Core services

- [Penetration Testing](https://bsd.md/services/penetration-testing): Manual, methodical security testing of networks, web applications, APIs, mobile apps, and cloud infrastructure. Findings reported with CVSS scores, evidence, and remediation guidance. Compliant with NIS2, PCI-DSS, and ISO 27001.
- [IT Audit & Security](https://bsd.md/services/it-audit-security): Regulatory compliance, information security, information systems, infrastructure, operating platform, database, IT General Controls, and BCP/DRP audits.
- [Information Security Management](https://bsd.md/services/information-security-management): Security programme design, implementation, and operation aligned to ISO 27001, NIST CSF, and NIS2. Risk governance, KRI monitoring, treatment planning.
- [Training & Consulting](https://bsd.md/services/training-consulting): Executive workshops, information security training, workshops for ICT auditors, and security awareness programmes in English, Romanian, and Russian.

## Products

- [pentest.md](https://pentest.md): Specialist penetration testing service and client management platform for Moldova and Romania. 500+ vulnerabilities discovered, 100% manual testing.
- [RedRisk.eu Platform](https://redrisk.eu): On-Premise or Cloud ICT and security risk management platform. Asset inventory, risk register, KRI monitoring, treatment plans, audit findings, and executive reporting.
- [Outthink.io](https://outthink.io): AI Human Risk Management platform for adaptive security awareness, autonomous phishing simulations, behavioural nudges, employee risk scoring, and AI threat simulations. BSD Management is a Human Risk Management partner.

## Website pages

- [About BSD Management](https://bsd.md/about)
- [Team and credentials](https://bsd.md/team)
- [How we work](https://bsd.md/how-we-work)
- [Product ecosystem](https://bsd.md/products)
- [Frequently asked questions](https://bsd.md/faq)
- [Contact](https://bsd.md/contact)

## Compliance frameworks

NIS2 Directive, GDPR, PCI-DSS, ISO/IEC 27001, ISO/IEC 27005, COBIT 2019, ITIL, EBA ICT Risk Guidelines, National Bank of Moldova cybersecurity requirements.

## Team credentials

10+ internationally recognised certifications: CISA, CISM, CISSP, CDPSE, CRISC, ISO 27001 Lead Auditor, ISO 27005 Lead Risk Manager, ITIL, TOGAF 9, CEH. Network of 15+ technical specialists. Services delivered in English, Romanian, Russian, and German.

## Track record

- 500+ vulnerabilities found and confirmed exploitable
- 50+ projects delivered yearly
- 50+ years combined team experience
- Clients: World Bank, UNDP, OTP Bank, Paynet, Biroul de Credit, Qiwi Moldova, Iute Credit, Paymaster (RunPay)
- Countries: Moldova, Romania, Ukraine, Lithuania, Hungary

## Contact

Email: info@bsd.md  
Location: Chișinău, Republic of Moldova  
Hours: Monday–Friday 09:00–18:00 EET/EEST  
Response SLA: within 24 hours on business days  
First consultation: free, 30 minutes, no obligation  

## Document information

Maintained by BSD Management. Last updated: 2026-09-04.