EVIDENCE.SECURITY.DECISIONS.

Our intention is to share the knowledge and experience gained by working for many companies in different sectors and for government bodies, and to help decision-makers manage in line with their strategic objectives. We can develop tailored solutions in corporate governance, ICT and telecommunications management, integral and information security, human-resources development and business-process modelling. We advise diverse stakeholders throughout the digital-transformation process.

If you are organizing a new business or reorganizing existing business structure, we can assist you in analysis of business processes, alignment of the control model with business goals and ICT structure. Our goal is to help you define the distribution of rights and responsibilities among different stakeholders in your company by using modern approach, hierarchy and matrix organization where necessary, but at the same time reflecting the context of the business itself, market and regulatory requirements.

Special attention will be given to avoidance of conflict of interest, overlapping of responsibilities, ensuring compliance with legal and best practice frameworks and development of human resources.

We believe in disclosure, transparency and ethical behavior as main drivers of corporate governance, so we apply the same principles when providing our consulting services.

ICT Governance (corporate governance of business ICT) is a concept formalised in the standards and guidelines defining ICT and telecommunications governance in the Australian government, and it has gained worldwide acceptance over the past decade. While ICT management deals with the development of business applications, ICT project management and the delivery of ICT services, ICT Governance extends through the entire management structure—from the Management Board President, through the Corporate ICT Governance Board, which usually comprises the Management Board members responsible for finance and ICT together with other senior executives, to ICT management and service delivery.

ICT is still poorly understood and treated as auxiliary or service function in companies. ICT is usually reactive (“defensive IT”), has operative importance (“factory mode”) and it is used as support to business (“support mode”). However, ICT should be proactive (“offensive IT”), and in that case, ICT has strategic value (“strategic mode”) or it can help in the change management and assist the company to remain competitive (“turnaround mode”).

It would be difficult to imagine proper ICT governance if ICT is reactive. To use ICT in your company to its full extent, we can help you create strategic environment analysis, business vision and create applicable SWOT/BCG/PEST reports. Furthermore, we can create business impact analysis, introduce key metrics and recommend how to enhance business processes. This usually calls for creation of inventory of business applications, hardware, network and technical infrastructure, lifeware, services, budget, operative expenses and investments. We will aim to compare your situation with current trends in ICT industries and create benchmarks, along with audit of ICT using one of available best-practice frameworks. Finally, we can create guidelines for short, mid and long term development of your ICT systems including vision, mission, goals, metrics, quality goals and human resource development goals and create a budget including calculation of ROI, IRR and TCO. The result of this process is a draft of strategic ICT plan, as a main tool in successful corporate ICT governance.

We can help you create and maintain information security management system in your organization by using methodology described by popular standards, frameworks and best practices. However, we can go one step further and help you organize and manage your information capital – non material form of capital whose usage in business activity acts as a catalyst in production of goods and services, represented by classified information and knowledge stored in information and document systems of the organization.

We look at information security from the corporate governance level, so we firmly believe that end result of the information security management system has to be not only achievement of main goals of confidentiality, integrity and availability but:

1. Achieving goals of excellence (increased efficiency, productivity and profitability)
2. Creation of the new products, services and business models
3. Better connection with clients and vendors
4. Enhanced decision making
5. Competitiveness
6. Enhanced daily operations

We strongly believe that information security management has six main deliverables:

1. Information capital and risk identification
2. Classification of data and information
3. Information and data life-cycle management
4. Creation, execution and follow up of information security plan
5. Full compliance with legal requirements
6. Cost-efficient information security operations

We can provide full range of corporate information security services and consulting, from creation of the formal information security system, through follow up and training to management of security incidents, forensic analysis, reporting and crisis management.

Integral (corporate) security is a relatively new concept in the corporate governance. Rising number of threats that might have a negative impact on the business has resulted in creation of a new CxO function – CSO (Chief Security Officer). Integral security is dealing with those undesirable outcomes that might endanger resilience and survival of the organization.

Main goal of integral security is to identify and manage such situations using preventive measures, or in their early stages of development.

Integral security is supervising, managing and coordinating those corporate functions that are in charge of safety, business continuity and security. Management of the integral security is in fact management of the risk portfolio. It is not static, but dynamic activity, whose importance, role and position within organizations changes with time.

Risks managed by integral security are risks imposed on human resources and intellectual capital, ethics and reputation, financial assets, ICT systems, transport, distribution and procurement chain, physical and premises security, safety at work and occupational health and safety.

Expected processes and services provided by integral security are global corporate security policy, protection of technology and infrastructure, risk management, business continuity management, disaster recovery and crisis management, awareness training, forensics and investigations, risk transfers and insurance, risk assessments and testing, management security, background information checks, public and state relations, industrial counter-espionage.

We will be glad to help you establish or manage your integral security function.

ICT evaluation is a systematic determination of a subject’s financial value, worth and significance in a corporate system, using criteria governed by outlined set of standards. ICT evaluations can help organizations program or plan proposals, concepts, alternatives and scenarios and help in decision making.

In the past, we developed several new valuation methods that had not previously existed. For example, we prepared a study valuing the development cost of a computer game used to recapitalise a company, and developed an original methodology for estimating the replacement cost of an integrated business information system used by a company. We have specialised in valuations of this kind, including assessments of actual development costs, operating costs, total cost of ownership, return on initial investment, and losses resulting from adverse events.

Our financial evaluations have greatly helped our clients to reflect on their past and current decisions and they have assisted them to identify the future changes.

We take pride in the fact that our knowledge is not only technical or organization but also financial: for us, ICT is not a technical discipline, but rather, a significant investment in business development. Our evaluations, appraisal and ICT audits can help you full understand the complexity of your processes, translated into financial and quantitative terms.

Labour costs in the ICT and telecommunications function account for around one third of total business ICT costs in more complex organisations. In those same organisations, 75 % of all ICT and telecommunications expenditure is operating expenditure and only 25 % is innovation and capital expenditure. Successful companies do not treat ICT department employees as “support” or “technical” personnel, because doing so is a sure route to losing people whose significant expertise can help transform the company and preserve its competitiveness. Of all business functions, ICT and telecommunications are the most strongly affected by Moore’s law. The number of ICT and telecommunications job types increases every year, while established compensation systems based on the Hay scale or another Point Factor System do not work well in ICT and telecommunications because they fail to account for the lack of immediate market substitution.

We can help you in classification, determination of roles, pay scales and development of human resources in ICT by using EUCIP’s, or custom framework.

You can choose already prepared training on topics related to ICT forensics, governance, human resource development and business process modeling, create your own training or ask for shorter, focused, in-house training.

The information on ready-made, custom and in-house training is combined below.

Corporate ICT governance is evaluation and implementation of the plans to use the ICT to support the organisation by using set strategy and policies.

Evaluation is a systematic determination of a subject’s merit, worth and significance, using criteria governed by a set of standards, that can help the management in decision making in regard to business goals and objectives.

The company has been operating since 2013, while its founder has served as a permanently appointed court expert witness since 2008. We have long-standing expertise and in-depth knowledge of the following areas:

• Corporate governance
• Corporate governance of business ICT
• Integral security (CSO function)
• Information security and cybersecurity management systems (CISO function)
• Expert witness work in economics, business ICT and information security (for individuals, in criminal proceedings and civil disputes, and for companies)
• ICT evaluations and appraisals
• Feasibility studies of new technology projects and master plans
• Training and education
• Business process modeling
• Development of ICT human resources

The company has experience working for the clients in the most complex and challenging environments and organizations. This involves:

• Difficult geographical areas and diverse cultures
• Interim management
• Recovery of failed and difficult projects (go/no-go decisions)
• Work under tight financial, time and quality constraints
• Decision-making under stressful and changing project environment conditions

We have been providing our consulting services in the following sectors:

• Oil and gas -downstream (retail and refining)
• Oil and gas-upstream (oil and gas services)
• Public sector
• Legal sector
• Banking, insurance and financing
• Retail
• Logistics chain-transport
• Seaport and river transport management
• Health care
• Business information system development companies
• New technology companies and startups
• Agriculture and food production
• Services

We have provided services to individuals as well as corporations with annual revenue of up to EUR 12 billion. We do not discriminate by financial significance or size and strive to help every client, regardless of the scale of their operations.

We especially take pride in usage of scientific methods, financial and process modeling and proven facts when answering your questions. You will not hear from us guessing and qualitative statements. We do not trust too much in slogans. However, we assure you that we will hear your problems, we will understand them, we will agree on terms, conditions, available time-frame and deliverables and we will help you resolve your problems and conduct your business in the most efficient manner.

The company founder is Prof. Saša Aksentijević, PhD, University Specialist in Economics and Full Professor in the technical sciences. He holds a PhD in business economics, with a dissertation in information security and information capital, a postgraduate specialist degree in Intelligent ICT Resource Management, with a final thesis in integral security, and a degree in business ICT, with a graduate thesis on computer networks. At the University of Rijeka, Faculty of Maritime Studies, he was appointed an honorary teaching assistant, Assistant Professor and Associate Professor, and since 1 August 2026 has worked there full-time as a Full Professor. He attended a series of management-skills modules at ENI University in Milan. He has more than 25 years of experience in corporate ICT and ICT consulting, including ICT governance, cybersecurity and integral security, as well as work as a permanently appointed court expert witness for ICT and telecommunications. He has served as a technical evaluator of ICT projects for the Croatian innovation agency HAMAG-BICRO, the European Commission, the Macedonian Innovation Fund, Cyprus’s IRIS agency, Montenegro’s Science and Technology Park and a number of other national innovation institutions. As a Full Professor at the University of Rijeka, Faculty of Maritime Studies, he teaches courses in information technology and business information systems, and previously also taught economics and financial management. He writes and publishes professional and scientific articles, participates in scientific conferences, lectures at seminars and peer-reviews professional and scientific papers.

Aksentijević vještačenje i savjetovanje, d.o.o., Milice Jadranić 34, 51000 Rijeka, is a private limited liability company registered with the Commercial Court in Rijeka, Republic of Croatia, MBS 040315967, MB 4130537, OIB 25445496582. Share capital of EUR 2,650 is paid in full. Management: Prof. Saša Aksentijević, PhD. The business account is held with Erste&Steiermärkische Bank d.d., Jadranski trg 3a, 51000 Rijeka, Republic of Croatia, SWIFT/BIC: ESBCHR22, account number IBAN HR0324020061100680120.

We have worked with many clients for whom we have been providing various services from our area of expertise. Because of confidentiality clauses, we are not in position to disclose them, but we will be glad to point you to right entities and instances if you wish to check our credentials. We have served a wide range of clients, from private persons to large corporations. Here is a description of work we have done for some of our clients and completed projects.

Criminal law litigations:

(In each case, full forensic investigation process was done, including data acquisition, analysis, extraction, creation of forensic report and sworn testimony in the court. Clients were usually courts – criminal and commercial and district attorneys).

1. Forensic analysis of child pornography exchange, storage and usage using computer system and network
2. Forensic analysis of identity theft (credit card fraud, hijacking of e-mail, embezzlement)
3. Forensic analysis of the banking business information system
4. Forensic analysis of the databases (dbase, Fox Pro, SQL, Oracle)
5. Forensic analysis of on-line bullying/threats using social networks (Facebook, LinkedIn)
6. Forensic analysis of the integral business information systems
7. Forensic analysis of authenticity of e-mail exchange
8. Forensic analysis of the data theft (the case of “disgruntled employee”)
9. Forensic analysis of the employee fraud (money theft) using POS system
10. Forensic analysis of the mobile phone usage (voice, SMS, MMS, data)
11. Forensic analysis of geo-positioning data
12. Forensic analysis of authenticity of e-mail messages from source to destination

Evaluations:

(In each case, a formal document was produced, that was a part of the process of recapitalization, liquidation or some other process. Clients are usually commercial entities.)

1. Evaluation of the market value of the digital photography
2. Evaluation of the value of computer and network hardware and software – process of recapitalization of the limited liability companies
3. Evaluation of the value of computer and network equipment during process of founding a limited liability company
4. Evaluation of the ICT budget, its characteristics, execution, capital and operative expenses and labour cost
5. Evaluation of the remaining value of ICT systems during company liquidation
6. Evaluation of the fair value of integrated business information system developed in the company, as a part of the recapitalization project

Consulting studies and reports:

1. Consulting report related to development and introduction of integral business information system in a national-level medical facility
2. Analysis (snapshot) of the current state-of-affairs of development of the corporate ICT system for a major national logistics chain operator
3. Optimization of ICT service contracts for a major national retail store chain
4. Study of future medium-term development of the corporate ICT system
5. Analysis of the achieved level of implementation of the new information
6. Consulting report of implementation of road speed measuring devices
7. Isolation of the evidence in a forensically correct way for corporate clients
8. Consulting report – creation of a scope of work and services for creation of a corporate integral business information system
9. Evaluation of alignment of the technology projects with legal requirements for tax exemption
10. Evaluation of eligibility of new ICT projects for state subsidies/support
11. Expert witness services in public-procurement procedures, including the preparation of technical specifications and submission of expert findings in proceedings before DKOM

Education projects:

1. Provision of single and several day courses to mid- and high- level executives, related to ICT governance, information and integral security and ICT forensics and court proceedings
2. Teaching business process modeling to a large groups of students at a university
3. Providing custom and tailor-made in-house trainings of executives and specialists

Our clients are from countries throughout EMEA and CIS regions.

Since early 2009., we have been maintaining a blog dedicated to ICT forensics, corporate ICT governance and ICT technologies. You can visit it by clicking on this link, but unfortunately, it is mostly in Croatian language. We try to update it from time to time with some interesting content we come across.

We can also stay in touch over LinkedIn.

Visit our website dedicated exclusively to expert witness work in business ICT and information security.

Our post mail address:

Aksentijevic Forensics and Consulting, Ltd.
Milice Jadranić 34
51000 Rijeka
Republic of Croatia

Contact us on ViberView the address on Google Maps

Privacy Statement

This website does not use cookies.

On 25 May 2018, new legislation governing personal-data protection entered into force through Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, together with the Croatian Personal Data Protection Act. Its purpose is to establish new, high standards for the collection, storage, processing and sharing of individuals’ personal data to improve their protection. It defines a set of measures specifying precisely who may retain and use other persons’ personal data, for what purpose and under what conditions. The individual’s right to decide to whom, and for what purpose, they entrust their personal data is the most significant advance introduced by this legislation.

In the course of its core service activities, Aksentijević vještačenje i savjetovanje, d.o.o. may use certain personal data belonging to its clients.

The personal data we retain and process in the course of our work is required by legislation governing court and out-of-court expert witness services and business consulting, and is necessary for regulating contractual relationships with our clients. We do not process other personal data.

Our work is based on confidential information that requires a high level of protection, while ethics is one of the fundamental principles of the expert-witness and consulting professions. We were therefore already largely compliant with the new personal-data protection legislation. Under Article 17 of the Rules on Permanently Appointed Court Expert Witnesses, a permanently appointed court expert witness must keep confidential everything learned while performing that work.

Drawing on our long-standing experience in applying new regulations in practice, and aware of the importance of the new legislation, we carried out a series of measures in the preceding months to achieve full compliance by the date the Regulation entered into force.

We completed a detailed review of data and documents, their flows, customary practices and procedures for use, together with the security and technical measures used to protect them.

We wish to explain your rights and inform you about the procedures and technical safeguards related to personal-data protection whose application Aksentijević vještačenje i savjetovanje, d.o.o. guarantees.

1. We collect only the personal data strictly necessary to provide expert witness and consulting services and to regulate our contractual relationship with you.
2. We use data solely to perform the work agreed with you.
3. We maintain precise processing and storage procedures for every operation involving data.
4. If data security is compromised, we have a defined plan for securing the data again.
5. We retain data only for as long as it is needed or a statutory retention obligation applies.
6. We never disclose data to third parties without your explicit request.
7. The ICT professionals responsible for the security of our computers must comply with the Regulation and applicable law and treat the data as a business secret.
8. We maintain a detailed record of all your personal data in our possession.
9. All documents containing data are protected. Paper documents are kept locked, while digital documents are protected using 256-bit encryption.
10. Data on local computers is backed up regularly.
11. Computers used to process data are protected by professional antivirus and antimalware software.
12. Computers used to process data use firewalls to prevent unauthorised access.
13. Computers used to process data are protected by access passwords.
14. All passwords are complex and designed in accordance with ICT security standards.
15. The premises in which we work and retain your data are physically secured and covered by an insurance policy.

We would especially like to draw your attention to your guaranteed rights concerning the personal data you have entrusted to us:

1. The right to know which of your personal data we retain and how we use it.
2. The right to receive information about all security measures taken to protect your personal data.
3. The right to transfer personal data to another organisation.
4. The right, in certain circumstances, to request the complete deletion of your personal data—the right to be forgotten.
5. The right to be informed of any event that compromises the security of your data, which is also our statutory obligation.

You can exercise these rights by contacting us:

1. By emailing sasa.aksentijevic@aksentijevic-vjestacenje-savjetovanje.hr
2. By writing to Aksentijević vještačenje i savjetovanje, d.o.o., Milice Jadranić 34, 51000 Rijeka, Republic of Croatia

Data controller

Saša Aksentijević, Director