Information Security Management

Your IT landscape is constantly changing due to new requirements. With digitalization, business-critical elements are increasingly dependent on IT processes and infrastructure. It is therefore crucial that your IT systems are well protected to minimise security breaches.

Is your IT security lagging behind evolving threats? Where exactly are the security risks in your existing system?

Accurately assess your existing IT security today and begin enhancing your system's information security.

A neutral analysis of the current situation and appropriate measures help steel your IT systems against cyber attacks. We identify the main risks and review your existing security arrangements.

We then identify risks that would be better covered by leveraging on an insurance policy, and those that can be handled in-house.

A cyber security assessment instills new risk awareness, allowing your organisation to better evaluate and implement countermeasures. When considering cyber security insurance for instance, conducting effective situation analysis and implementing appropriate measures will be crucial in identifying cost-effective products.

After the cyber security assessment, your organisation is better equipped to understand and therefore respond to IT security threats.

Our cyber security assessment is based on decades of experience in information security and IT security for both the public and private sectors. Following the assessment, we can help your organisation decide on specific measures, the planning, and the technical and organizational implementation.

As a result, your organisation receives all-round protection and enhanced clarity on how to protect valuable data from proliferating cyber threats.

Web applications are attractive targets for attackers as they are usually widespread and exposed. Software development departments or teams do not always pay the necessary attention to security as other requirements are in focus. Such shortcomings should be identified with a penetration test.

Usually web applications are accessible from the internet and can therefore be tested without further access provisioning. If a web application is only used in an internal network, it is necessary to get the appropriate access to perform the tests.

With increased mobility and the possibility to access services and applications through a mobile phone, mobile applications are becoming a more attractive target for attackers.

To preempt the attackers our experienced and knowledgeable employees test your mobile applications for the most common operating systems such as iOS and Android.

When performing a network or infrastructure penetration test, a defined IP range or network area is analyzed. Thereby the services available are identified and probed by trying to attack them.

Target areas can be internal networks or systems that can be accessed from the internet.

If internal networks are tested it is necessary to receive the corresponding access rights to test the network and its services. In such a scenario an attack from an employee or from an attacker that already gained access to the internal network can be simulated.