Information security
Information security that passes audits and wins contracts
Your external information security officer (ISO) builds your ISMS and takes you towards ISO 27001 — starting with a structured gap analysis.
Request a gap analysisHow we work together
No obligation, no sales pressure
ISMS · ISO 27001 · BSI · TISAX
ISO 27001TISAX
The reality
Without the evidence, companies often drop out of a tender before they even bid. With an officer and a plan, that turns into a head start.
The risk of waiting
On average around 277 days until a data breach is identified and contained (IBM Cost of a Data Breach Report).
The advantage of acting
ISO 27001 and TISAX are increasingly a condition in tenders from larger customers — which turns a certificate into a selling point.
Which companies is information security especially important for?
Suppliers to the automotive industry
Many manufacturers require a TISAX label from their suppliers before they award a contract.
IT and SaaS providers
In tenders, customers increasingly ask for ISO 27001 as evidence that their data is handled securely.
Companies subject to NIS2
In practice an ISMS is the basis for meeting the risk management and evidence duties that NIS2 brings.
What you get, concretely
Request a gap analysis: a structured stocktake, with no obligation.
- External information security officerAn officer who owns your ISMS, without you having to fill a post of your own.
- Building the ISMSPolicies, a risk inventory and measures that fit your company.
- Support towards ISO 27001Preparation and support through to the certification audit.
- Business continuity (BCM)Contingency plans so that critical processes keep running through an outage.
- Incident responseA rehearsed procedure for the real thing: who does what, and who gets told.
- Gap analysisA structured stocktake of where you are today and what is missing before certification.
Operational protection alongside the ISMS
IT security from our own team.
An ISO 27001 certificate no longer opens doors, but without one more and more of them stay closed. Anyone who only starts once a customer asks loses six to twelve months.
How we work together
Gap analysis & where you stand
A structured analysis shows where you are today and what is missing.
Building the ISMS & documentation
An external officer takes on policies, the risk inventory and the measures.
Support towards certification
Support through the audit for ISO 27001, TISAX or BSI IT-Grundschutz.
Ongoing work as your external officer
A fixed contact, an annual review, and incident response.
Where does your company stand today?
A gap analysis shows, in a structured way, what is still missing for certification.
- No obligation
- No sales pressure
Frequently asked questions
ISMS, ISO 27001, BSI IT-Grundschutz and TISAX — what is the difference?
An ISMS (information security management system) is first of all just the organisational concept: the rules, processes and responsibilities with which a company steers information security systematically. ISO 27001 is the internationally recognised, certifiable standard for such an ISMS and is examined by independent auditors. BSI IT-Grundschutz is the German counterpart with a somewhat different and very detailed catalogue of measures, which can likewise lead to ISO 27001 certification. TISAX is a sector-specific assessment and exchange mechanism for the automotive industry, based on the VDA assessment catalogue (VDA-ISA), and today a condition for being awarded work in many OEM supply chains. Which evidence is actually demanded usually depends on your largest customer or on the particular tender.
Is the gap analysis enough on its own, or do we need a full ISMS straight away?
The analysis is a first step towards knowing where you stand. Whether a full ISMS is needed depends on customer requirements and on your risk.
How long does ISO 27001 certification usually take?
Depending on where you start, typically 6–12 months until you are ready to be certified.
From our blog
See all posts
Let's talk about your project.
Tell us what you have in mind. Your message goes straight to our team.
Daniel Tölgyesi
CEO
Loading the form …