Together with you, we develop a cybersecurity strategy that unites information security, data protection and compliance, matched to your business processes.
Our services for developing your cybersecurity strategy
Information security management system
To ensure your security level and compliance in the long term, a clearly structured, systematic approach is needed. We support you in building and developing a suitable information security management system (ISMS) and, where required, also data protection and data security management systems.
Our experts hold certifications as ISO/IEC 27001 lead auditors and bring practical experience from a wide range of industries and companies. We use this know-how to support you purposefully in the following areas:
- Building and introducing an ISMS
- Developing or updating policies and requirements
- Defining roles and responsibilities
- Designing processes and procedures to ensure information security
- Preparation and support for certifications (e.g. ISO/IEC 27001)
- Assessment and review of existing management systems
Policies and legal requirements
We help you reliably implement the requirements from higher-level rules. To this end, we support you in creating or updating internal instructions, policies and requirements. We also support you in introducing technical guidelines, for example in system hardening, ensuring a sustainable and secure implementation.
Security concept
Would you like to define clear security requirements and measures for your project or organization? Together with you, we develop a tailored security concept based on ISO/IEC 2700x (or other standards on request). At the same time, we ensure compatibility with common project management methods such as HERMES or PRINCE2.
A security concept includes in particular:
- A detailed description of the asset to be protected
- An assessment of the specific security needs
- Analysis of possible threats and damage scenarios (threat modeling)
- Estimation of probabilities of occurrence and potential impact (risk analysis)
- Derivation of security requirements and suitable measures
- Documentation of any residual risks
Security strategy
Together with your key people, we develop a tailored strategy for cyber security, information security and data protection that is optimally matched to your business processes.
Our focus areas:
- Development of a targeted strategy, matched to your organization
- Definition of central principles and objectives
- Use of suitable governance instruments
- Definition of performance indicators and benchmarking
- Creation of an action plan with a clear roadmap