Protection according to BSI IT-Grundschutz

The German Federal Office for Information Security publishes the IT-Grundschutz, proven standards and state-of-the-art measures to secure your IT.

The procedures and standards are suitable for you if you are a small and medium-sized enterprise running your own IT.

With IT-Grundschutz you can systematically and incrementally build and improve your information security management system (ISMS).

Both in the context of a scientific thesis and in a professional context, I have dealt in detail with some aspects of IT-Grundschutz.

I will support you in the planning and implementation of your protection.

Together we

• evaluate whether the BSI basic protection (IT-Grundschutz) is suitable for you
• choose the right approach for your company
• identify the appropriate building blocks
• determine your protection needs
• arrange the measures from the modules to suit your needs

ISMS processes and awareness trainings

Management systems help you to demonstrably design your operations with measurable and predictable quality. Based on key performance indicators (KPI), you can detect deviations, identify problems and further improve processes step by step.

This is especially true for your information management system (ISMS). You need to understand the information security implications of your practices. This is the only way you can realistically assess risks and counteract dangers through appropriate prevention.

Unfortunately, the need for regulated processes and certain principles of information security is often not self-explanatory.

The benefits of end-to-end documentation and protocols are also not always intuitively apparent.

You and your staff should view information security as a business enabler, not a necessary evil. This requires regular measures to raise awareness.

I will guide you in the selection and implementation of your training measures

• in finding suitable

Concepts and systems architectures

Structural analysis and system documentation

Software revision and process automation

Security-by-Design and structural optimization