Are you missing the right specialists for a project or an internal position? Our experts support you flexibly and without fuss in all matters of information security and data protection. We relieve your security team of strategic and operational tasks and bring the necessary know-how to bear exactly when you need it. On request, we also train your project leads, security officers or staff, so that security-relevant initiatives can be implemented successfully.
Our on-demand services in information security & data protection
Chief Information Security Officer
We complement your existing information security team with additional experience and resources, or support you in building a new team within your organization.
Our services in this role include, among others:
- Taking on or deputizing for the CISO/ISO function (CISO-as-a-Service)
- Supporting your security team on strategic and operational questions
- Coaching and developing internal security specialists
- Guidance and support in handling security incidents
- Building and maintaining an information security management system (ISMS)
- Leading or supporting security-relevant projects
- Development of policies, requirements, concepts and risk analyses
- Preparation of opinions and expert assessments
Data protection officer
We take on the role of data protection officer, data protection consultant or data protection specialist for you, in a deputizing function on request. We comprehensively handle the implementation, development and monitoring of data protection in your organization.
Our services at a glance:
- Conducting data protection audits and clarifications
- Advising the responsible parties and training and raising awareness among staff
- Support in implementing legal data protection requirements
- Monitoring the processing of personal data, including initiating corrective measures
- Creation and updating of guidelines, policies and processes
- Conducting and analyzing data protection impact assessments (DPIA)
- Expert guidance on data-protection-relevant projects
- Annual internal audits with risk analysis and reporting
- Building and ongoing maintenance of a data protection management system (DPMS)
Security architect
As a security architect, we are your partner in developing a resilient, security-oriented IT infrastructure, both on-premises and in the cloud. We always keep an eye on current technological developments and trends.
Your benefits at a glance:
- Design and build-up of a practical, resilient target security architecture for cloud and on-premises environments
- Definition and implementation of architecture principles and requirements to optimize and strengthen your IT processes
- Support and coaching of your engineering and operations teams in developing suitable solution models, taking internal and external requirements into account
Security engineer
As a security engineer, we ensure the security of your IT infrastructure and respond quickly to potential vulnerabilities. Our work covers both operational and conceptual topics and ensures that security requirements are integrated into your IT landscape.
Our tasks at a glance:
- Support in introducing and implementing DevSecOps practices and the corresponding tools
- Review of DevSecOps processes and their integration into CI/CD pipelines
- Consulting, design and review of security architectures and designs
- Support for secure software development, e.g. by defining a Secure Software Development Lifecycle (SSDLC)
- System hardening to secure your systems
- Conducting practical training, among others on:
- Threat modeling
- DevSecOps
- Security automation
- Agile security organizations
- Container & Kubernetes security
- Cloud security