Information Security Assessment

Why an Information Security Assessment?

Information security encompasses far more than updating software and IT systems. Threats lurk in many areas that are often overlooked:

• Physical Risks – Break-ins, environmental influences, flooding, fires, power outages
• Organizational Weaknesses – Lack of personnel controls, careless handling of sensitive data
• Regulatory Requirements – The NIS2 Directive as well as KRITIS demand verifiably holistic protection

These threats can jeopardize the confidentiality and integrity of customer data, trade secrets, and personal data, or significantly disrupt the availability of critical business operations.

Our information security assessment helps you to comprehensively determine the current state and derive concrete measures – both reactive and preventive. This ranges from risk analysis and the protection of critical systems to incident handling.

The Assessment Consists of Two Services

InformationSecurityMaturityAnalysis

Evaluation of your security measures at the organizational, technical, and personnel level:

• Interviews in accordance with ISO/IEC 27001
• Document reviews and on-site inspections
• Detailed mapping of the current state of your information security
• Concrete optimization proposals with prioritization

VulnerabilityAnalysis

Vulnerability analysis is an excellent complement to the maturity analysis for verifying security measures at the technical level:

• Identification of initial attack vectors and vulnerabilities
• Automated tests with manual risk analysis and evaluation
• Assessment from both an internal (company network) and external (Internet) perspective

What You Receive

• Results Report – Detailed current state with identified vulnerabilities and risk assessments
• Action Catalog – Prioritized recommendations including effort estimation
• Results Presentation – Personal presentation and discussion of next steps