Behind each of these requirements is the same question: which obligations apply to us, what do we already have and what is still missing? We help with the assessment, the implementation and the proof of effectiveness.
Regulatory requirements
NIS-2, CRA or GDPR: when a requirement is the trigger, you'll find the direct entry point here.
Regulation at a glance
Implementing NIS-2
Implementing NIS-2: clarify whether you are affected, build risk management measures, establish reporting processes and demonstrate effectiveness. Consulting and testing from one source.
Learn more…Cyber Resilience Act (CRA)
Cyber Resilience Act: classify your product, risk assessment, product pentest as evidence for the technical documentation, CVD process and the ISMS route to Module H.
Learn more…GDPR & data protection
Implementing and demonstrating GDPR Article 32: appropriate technical and organizational measures and a process for regularly testing their effectiveness.
Learn more…BSI C5 and penetration testing
BSI C5: independent external penetration tests per OPS-22 for your attestation, delivered by a BSI-certified IS penetration testing service provider.
Learn more…Implementing DORA
Implementing DORA (Regulation (EU) 2022/2554): ICT risk management, incident reporting, resilience testing and ICT third-party risk. From gap analysis to test evidence.
Learn more…Classified-information protection and VS-NfD
VS-NfD and classified-information protection: implementation advice per BSI IT-Grundschutz, self-accreditation and penetration tests.
Learn more…Effective security for your organization.
We bring your information security into demonstrable alignment with the requirements. Arrange a free initial consultation.