Know where you really stand
Whether for compliance or for certainty: we assess honestly where you stand, against standards and regulations or against your real threat landscape.
Get in touchOur Audit Services
Four audit formats for two questions: do you meet what standards and regulations require, and would your measures withstand a real attack? From the management system and the gap analysis to the technical check and the Threat-Informed Assessment, we test both. One principle connects them all: honest findings instead of a courtesy report, prioritized and actionable.
Management System Audit
You already operate a management system? We audit it against recognized standards such as ISO 27001, TISAX® (VDA ISA) or BSI IT-Grundschutz: conformity and maturity, evidence-based. You receive a traceably documented report with deviations and prioritized recommendations and go into the certification audit by the accredited body fully prepared.
Gap Analysis
No certification-ready system yet? The gap analysis is the baseline assessment beforehand: we compare your current state with the target standard (ISO 27001, NIS2 or DORA) and show what is still missing for conformity, as a gap list with an action plan and a realistic effort estimate, before you lock in budget and schedule.
Technical Security Check
Technical review of your environment: configurations, hardening, Active Directory, cloud and network. You receive concrete findings with severity and a fix recommendation. No theory.
Threat-Informed Assessment
The assessment no standard requires, but every adversary would have to pass: we test your security measures against your real threat landscape. Which of the attack techniques relevant to you do your controls cover, and which do they not?
The Path to Your Audit
Every audit, whether GRC or technical, follows the same clear path with us and usually runs through these phases: from the first question to the report with prioritized recommendations, predictable and transparent.
01Initial consultation
We clarify scope, goals and framework: what is audited and why.
02Audit planning
Audit scope, standard or threat model, and schedule, coordinated with your team.
03Execution
Organizational and technical audit, on site or remote, with real attack techniques where useful.
04Findings & report
Prioritized findings, documented traceably: understandable for management, concrete for the specialist team.
05Results presentation
We walk you through the results and derive concrete measures.
06Implementation support
On request, we support the remediation until the gaps are closed.
Who conducts your audit
Your audit is not handled by junior consultants with a checklist. It comes from certified auditors with many years of experience, including as certification auditors for audit bodies such as TÜV.