Information security is the assurance of the confidentiality, availability and integrity of information, regardless of how it is represented and stored, and of information processing systems. Information is thereby protected from loss, falsification and unwanted disclosure.
With well thought-out information security, you protect your information the best way possible. At the same time, you also demonstrate your sense of responsibility and your duty of care. This will be noticed – by your customers, employees, suppliers, stakeholders, etc. Especially if you have your company certified according to the international standard ISO 27001. Transparency and security create trust and have a positive impact on your reputation
Information security management system ISMS
Information security processes that can be managed based on risk
- Development and implementation of an information security management system according to ISO 27001
- Optimisation of the security organisation with clear tasks, responsibilities and competences
- Development and review of requirements documents and guidelines
- Development of security procedures and processes
- Certification preparation and support
- Privacy Information Management System (PIMS) according to ISO 27701 as a supplement to the ISMS
Strategy, guidelines and concepts
As much as you need and as much as is appropriate
- Creation of adequate management attention
- Conducting audits and gap analyses of the security level
- Conducting information security risk analyses
- Definition of security principles
- Development of security concepts
- Conducting security requirements analyses
- Development of information security and data protection concepts
- Development of key performance indicators (KPIs)
- Planning and monitoring of measures
- Development of roadmaps
Information security law
Good things come to those who wait? For the new information security law Informationssicherheitsgesetz ISG we offer
- Consulting on whether and in what form the law could affect your organisation.
- Consulting with affected companies on the implementation of the requirements.
Information security audits
The Information Security Health Check or a comprehensive audit of your information security management system (ISMS) provides additional governance knowledge and is a useful management tool for the management.
- Performance of site assessments and audits in any width and depth
- Performance of gap analysis for ISO 27001 to determine the specific need for action
