Many pharmaceutical organizations have their GMP affairs well in order but hit a wall when it comes to IT security. This is not due to a lack of willingness, but because expertise in both worlds is rarely found within the same team.
Cybersecurity for the pharmaceutical industry
Inspectors are increasingly asking questions about network security, access management, and data integrity. PCS & Magic Software have the answer.
Cybersecurity expertise
- Cybersecurity Act (NIS2) enters into force; pharma classified as "essential"
- Since Q2 2026
- PCS's GMP/GDP experience in the pharmaceutical sector
- 30+ years
- Magic Software certification for information security
- ISO 27001
- Matrix certification, specifically for healthcare and pharma
- ISO 27799:2016
What it's about
Many pharmaceutical organizations have their GMP affairs well in order but hit a wall when it comes to IT security. This is not due to a lack of willingness, but because expertise in both worlds is rarely found within the same team.
That is precisely where PCS and Magic Software complement each other. PCS knows your sector; the regulations, the systems, and the audit process. Magic Software knows information security; ISO 27001, risk management, and day-to-day security practices. For in-depth technical expertise (such as penetration testing and red teaming), they call upon their parent company, Matrix, which holds ISO 27799:2016 certification for the healthcare and pharmaceutical sectors.
"In the AI era, cybersecurity is no longer only about defense, it is about intelligence, resilience, and business continuity."
What we offer
Cybersecurity during your GMP audit.
The most accessible way to get started. During an existing GMP audit conducted by PCS, a security consultant from Magic Software joins the process as a second auditor. They focus specifically on information security: how system access is managed, what the incident response policy entails, and how the network architecture is structured.
Not a separate project, but an extra pair of eyes translating security risks into your GMP context. The findings are incorporated into the existing audit report.
Cybersecurity during the GMP-audit
€ 1500 / day
The easiest way to get started.
Request a quoteDuring an existing GMP audit conducted by PCS, a security consultant from Magic Software joins in as a second auditor.
- 1 to 2 working days
- Extra set of eyes on security risks
- Part of the regular audit
- No additional preparation required
- Cybersecurity observations and recommendations included in the audit report
Cybersecurity Quick Scan
€ 3500 / starting price
An independent assessment of your IT setup.
Request a quoteWe examine access management, network architecture, incident response, and policy documentation.
- 3 to 5 working days
- Comprehensive report with findings
- Ranked by urgency
- Suitable as a baseline assessment
- Helps prepare for inspections
NIS2 Readiness Assessment
€ 5500 / starting price
This assessment maps out where you stand regarding NIS2 obligations.
Request a quoteYou will receive a gap analysis, a risk assessment based on ISO 27001, and a prioritized implementation roadmap.
- 5 to 10 working days
- Comprehensive gap analysis
- Risk assessment based on ISO 27001
- Implementation roadmap with priorities
- Suitable for justifying the initiative to management
- Input for follow-up projects
Pentests and technical assessments (via Matrix)
If you want to know whether your systems can actually withstand attacks, penetration tests are the next step. These are conducted by Matrix, the parent company of Magic Software. Matrix holds ISO 27799:2016 certification, specifically for information security in the healthcare and pharmaceutical sectors.
Critical findings are reported within 1–2 days of discovery. The full report follows within 10 working days of completion.
| Service | Lead time | From (excl. VAT) |
|---|---|---|
| External pentest | 5-8 working days | €3000 |
| Internal pentest | 5-10 working days | €5000 |
| Web application / API assessment | 5-10 working days | €4000 |
| Configuration and hardening review | 3-5 working days | €2500 |
| Red / blue teaming | 2-4 weeks | €15000 |
Ready to get started?
Schedule an intake meeting with no obligation. During this meeting, we will map out your environment, systems, and requirements, and jointly determine the scope.
The way we work
We always start with an intake meeting. During this session, we map out your environment, systems, and requirements, and define the scope together. Based on this, you will receive a tailored schedule and quotation.
During the execution phase, the security consultant works alongside the PCS team (for audits) or independently (for assessments and pentests). Critical findings—if any—are shared immediately, rather than waiting for the final report. The full report is delivered within 10 working days of completion, followed by a presentation to your team in which we explain the findings and discuss next steps.
About our cooperation
“Parent company of Magic Software. Covers the entire security spectrum with a team of technical specialists. Moreover, Matrix holds ISO 27799:2016 certification, specific to the healthcare sector.”
Matrix International Systems
Cybersecurity Expertise
“Magic Software deals with information security on a daily basis and is ISO 27001 certified. They advise organizations on security policy, risk management, and process improvement.”
Magic Software
Expertise in Software for Pharma & Healthcare
Get in touch!
Curious about our services? Contact us for more information about our cybersecurity services.