You want to know where your organisation stands, review a planned solution or get a second opinion. We examine your specific question and create a reliable basis for the next decision.
Security Advisory is aimed at executive management, security officers and IT teams who need additional expertise for a specific purpose.
We analyse selected technical and organisational security measures and show where there is a significant need for action.
We assess security concepts and existing or planned architectures. Among other things, we look at access, identities, data flows and dependencies.
We compare options for action and make their impact on security, effort and operations visible.
When changes such as cloud adoption or larger IT projects are under way, we bring the security perspective into planning and implementation.
Together with your responsible staff, we check whether roles, escalation paths and decision-making processes for crisis situations are clear. In scenario-based exercises, we test the approach and derive improvements.
First, we clarify the question, the scope of the review and the result required. Depending on the assignment, we review documents, conduct interviews and analyse technical matters.
We discuss the results with you and prioritise the next steps. If required, we support the implementation in a follow-up assignment. The focus is on a clearly defined question; an ongoing CISO function is a separate mandate.
You receive a documented assessment of your question with prioritised recommendations. Options for action and open decisions are prepared so that executive management and the responsible specialists can decide on the next steps.
An asset manager wants to prepare its employees for situations that disrupt business operations.
Every year, we run an exercise on business continuity management, that is, on maintaining key business processes during disruptions. Using a cyber scenario, participants practise making decisions and agreeing on the next steps.
The training offers an opportunity to review the joint approach and identify room for improvement.