IT Security Consulting

IT security consulting from certified experts for SMEs

IT Security consulting from certified experts

IT security consulting from certified experts is always worthwhile for SMEs (small and medium-sized enterprises) as well as large companies. Our own information security management system is certified in accordance with ISO 27001. ISO 27001 defines the conditions that an information security management system must fulfil.

SMEs, which we specialise in, are just as exposed to cyberattacks as large companies. The widespread opinion that small companies are invisible and too small to be a lucrative target is not true.

As hackers increasingly automate their attacks, it is easy for them to target hundreds, if not thousands, of SMEs at once. In the face of increased IT security risks, traditional IT security techniques and methods often fall short.

Find out how we can protect your data, systems and therefore your business success in the long term with IT security consulting and IT security solutions.

What IT security consulting services do we offer SMEs?

Find out which IT security consulting services we offer for SMEs here.

Our security experts cover the entire security lifecycle: from IT vulnerability analyses, reviews of your information security management system (ISMS), audits and security checks to implementation and training in the use of new security solutions.

Consultancy usually begins with a detailed analysis of the current situation. Important topics include network security, endpoint security, application security, cloud security, email security, authentication, vulnerability management and detection & response.

As a result of our consultation, you will receive recommendations that you can implement yourself or with the support of our IT security experts.

IT vulnerability analysis to improve the level of IT security

An IT vulnerability analysis serves to improve the level of IT security in your company and should always be customised to your internal circumstances.

As a result of the IT vulnerability analysis, our consultants work with you to determine which IT systems (networks and devices) and business processes interact, what attack risks these systems have and what points of attack there are for external hackers. It is important to consider how high the probability of occurrence is and how great the damage can be in the worst-case scenario.

This makes it clear which IT systems are most important for business continuity, have the greatest risk and must be protected with the highest priority or security gaps must be closed.

Services for an IT vulnerability analysis

In an initial consultation, we clarify the scope of the IT vulnerability analysis with you. This can vary in terms of the effort involved, as it depends on the size and complexity of your IT systems to be analysed.

Testing and visualisation of the IT security level
Detection of critical IT security vulnerabilities
Categorisation of the findings according to the risk of danger
Proof of appropriate measures to protect personal data (GDPR)
Review of technical and organisational measures for security processes and functions (e.g. patch management)
Recommendation of measures and pre-selection of best practices, security functions and technologies
Creation of a report with the results of the analysis

The aim is to develop an end-to-end security architecture that combines the right technologies and security functions in line with your strategy and requirements.

Implementation of the selected IT security solution

We will implement the selected IT security solution for you or support you in doing so.

For your IT security project to be successful, it is important that the implementation is based on a carefully thought-out security process or security architecture. Our IT security consultants ensure that no problems occur during implementation or that the selected solutions fail to meet your needs.

Operation of your IT security solution

After implementation, our consultants will take care of the operation of your IT security solution.

If your company would like to operate the new security solution itself to some extent, we will train your employees and create manuals for them.

However, SMEs often have too little time and trained staff to monitor the systems themselves and ensure that they function securely. This is why more and more companies are opting to operate their IT security solutions as a managed service from an experienced service provider.

How does the consultation for your IT security project work?

Find out now how the consultation for your security project works.

Pre-discussion about
your Project

In a pre-discussion between you and our consultants, all the framework conditions are agreed. We will clarify what exactly is to be tested. This can include, for example, a single web app, a predetermined number of IP addresses or your website. During the pre-discussion, we will advise you on the most sensible options for you.

Carrying out an analysis of
your current IT security

The analysis of your current IT security is carried out on a date agreed with you. We take on the perspective of an external hacker from the Internet and identify IT security vulnerabilities for the agreed systems and devices that are to be tested for you. The test is usually carried out from our company headquarters or at your premises. In order to guarantee you a smooth process, you should provide us with a contact person for our consultant.

Report on your
IT security project

he report on your IT security project contains 4 chapters: Generalities, Management Summary, Technical Details and Recognised IT Security Functions. The focus here is on the technical details. In this chapter, the identified vulnerabilities are categorised according to risk. We weigh up the critical vulnerabilities against those that pose a relatively low risk. We then derive recommendations for action to close the IT security gaps for you.

WHY IS IT SECURITY CONSULTING WORTHWHILE?

IT security consulting is worthwhile for you because our consultants have experience from other customer projects and can therefore provide you with a holistic view of the current threat situation, attack criteria and available security technologies. Our consultants are familiar with the requirements of regulations such as ISO 27001, the GDPR and the IT Security Act and know how best to implement them. In all of this, we draw on proven best practices.