Security Management

Our competence area GRC bundles all activities in the conflict area of IT-security directed Governance, Risk & Compliance (IT-GRC). Here our specialists and lawyers support you to design and create guidelines. We also assist you to implement, optimize and operate IT-risk management and, if necessary, to comply with any existing internal and external standards.

To achieve this we focus on technical design and effectiveness of GRC-measures in the interrelation of humans, strategies, technologies and processes. It is important to our customers that GRC-measures for appropriate IT security develop technical operational effectiveness and should not only be indicated on paper.

Security Management (ISMS nach ISO/IEC 27001:2013)
- Organizational Gap-analysis
- Creation of security guidelines, -processes and -procedures
  - DSGVO compliant
- ISMS implementation on organizational level according to ISO/IEC 27001:2013 as well as BSI-100 series (basic protection)
- Security concepts / Controls
  - Development of Incident Management
- Technical Compliance according to ISO/IEC 27001:2013
Risk Management
- Risk-assessment in consideration of results of security tests, business risk strategy and core business processes
- Integration of IT-risk management into corporate risk management
DSGVO implementation
- Privacy Assessments
- Privacy Capability Assessment
- Privacy Management
- ISMS for Privacy Management
- Privacy Implementation
- Privacy Architecture Engineering
Process-Assessments
Development of KPIs for measuring and monitoring IT security
Acceptance of mandates
- as company data protection officer (bDSB)
- as safety officer (SiBe)
Introduction of emergency management based on the standards BS 25999 or BSI-100-4
Technical and legal expertise

Security Management

Organizational and legal IT-Security

Our solutions include

Your contact person

Andreas Eichmann

Reference projects

Committee work

Lectures

Publications

Company

Main focus

Competences

Focus industries