FutureCode IT Consulting

Data governance with named owners

The Polish firm FutureCode now centres its work on data security, compliance and AI governance. Its data practice assigns an owner and a clear meaning to each dataset, records where data comes from and how it has changed, and keeps one agreed definition for every key performance indicator. The same metadata layer serves AI projects and audits, and the firm maps data flows to third parties. A first fixed-scope step, which runs four to six weeks, produces a map of data flows with owners and a 90-day roadmap.

Security testing and retesting

Security testing maps the attack surface and its dependencies, then validates real attack paths by hand rather than relying only on scanner output. The firm reviews permissions and integrations, and sets priorities by business criticality. It retests fixes instead of accepting a closure declaration, and a shorter opening step of four weeks covers a single system and its integrations, ending with a backlog that has owners and deadlines. The stated goal of that step is closing at least one critical attack path.

Compliance evidence and AI rules

The firm helps companies meet KSC, NIS2, ISO/IEC 27001, DORA and the AI Act by turning each requirement into a task with an owner and a deadline. Controls are built into the systems themselves, and the evidence is ready before an auditor arrives. A gap analysis against one regime, followed by a 90-day roadmap, is the usual starting point, and it answers customers' security questionnaires as part of the work. FutureCode also lists the regulatory dates that companies should plan around, including those under the new machinery regulation and the Cyber Resilience Act.

Rather than banning AI tools, which staff tend to work around with personal accounts, FutureCode starts with an AI strategy that identifies valuable use cases and the risk the business will accept. It then sets up access, data filtering and logging so approved tools are easier to use than private ones, and it tests applications built on large language models for security. The firm states that each of its projects includes someone with at least ten years of IT experience.