Security isn’t
something you buy.
It’s something you design.

NIS2, DORA, CRA, ISO 27001, TISAX: you know they affect you. What is open is the how, the when and the order. From 15 years of responsibility and auditing, we deliver pragmatic solutions instead of reinventing the wheel.

Get in touch
Security architectureISMS setupISMS operationDetection & ResponseVirtual ISOVirtual CISO
How We Work

Who designs your house?

Anyone building a house goes to the architect first, not the electrician. When in doubt, the electrician designs the house that suits their trade. In information security, exactly this happens every day: the vendor recommends its product, the TISAX consultant a TISAX project, the systems integrator more systems. All of them can do good work, but none of them plans neutrally.

That is why our advice to every organization about to invest money in information security is: have it planned neutrally and independently of vendors first. This architect role is our work. We are not a systems integrator and not a reseller; we analyze your threat landscape, design the strategy and prioritize the investments. What gets built afterwards is your decision, and others may build it too.

Governance, Risk & Compliance

From Requirement to Conformity

Regulations and standards can be planned once you know what is really required. We support you from the applicability assessment to the proof of compliance, pragmatically and without mountains of paper.

How can we help?

Whether NIS2, DORA, ISO 27001 or TISAX®: not every requirement demands the same thing, and far from everything that is possible is also necessary. Choose a topic on the left for details, or request a consultation directly.

Cybersecurity

Structure and Hardening

Security that works, even without a certification requirement: a baseline assessment along established frameworks, concrete technical hardening and defense aligned with your real adversaries.

How can we help?

Cybersecurity is more than a framework. Baseline assessment, technical hardening and threat-informed defense work together. Choose a topic on the left for details, or request a consultation directly.

Incident & Resilience

We are there when it matters

And we make sure you are prepared. Response and preparedness belong together: how well an incident turns out is largely decided before it happens.

How can we help?

An attack, an outage, a service provider that drops out: in an emergency, what counts is that someone assesses the situation and your organization knows what to do. Choose a topic on the left for details. If something is on fire right now, use Urgent Help at the top right and we will call you back.

Hands-on & Interim

Staffed externally, effective internally

When the role is missing but the responsibility is there: we take on operational security roles in your organization, externally or on an interim basis, temporarily or permanently, with a clear mandate.

How can we help?

Not every organization can or wants to fill its own security role. We step in, permanently as an external partner or on an interim basis to bridge a vacancy. Whether the role is called CISO, ISB, ISO or ISM: choose the details on the left, or ask us directly.