Are your critical systems resilient enough?

Do you know the maturity level of your information security? Are you well prepared?

Gap analysis cyber security

Do you know what to do if your IT has been compromised? Do you have the necessary knowledge to effectively protect your organisation against cyber attacks? How well do you recognise cyber attacks and are you prepared to defend against them? Are you unable to answer these questions correctly? Then it's time for a cyber security gap analysis - in particular for operators of critical infrastructure.

Cyber attacks are not a question of "if", but "when". A successful cyberattack or technical failure can jeopardize the provision of critical services—with immediate consequences for the public, the economy, and public safety. With a cyber security gap analysis, you can find out how resilient your organisation is and what vulnerabilities exist. Remain capable of acting when it counts. Our gap analyses are standardised, based on best practices and take into account the guidelines of the BSI, particularly in the context of KRITIS requirements, as well as ISACA best practices and ISO/IEC 27001 assessments.

  • The gap analysis includes a risk assessment and a review of the relevant documents.
  • As part of the on-site assessment, IT systems and measures are checked and any additional documents are reviewed.
  • Our accredited consultants analyse and determine the status quo and establish the level of cyber security in your organisation (comparison of the current status).
  • You will receive specific recommendations on how you can eliminate any security deficiencies identified.

Practice-orientated approach

Developed together with experts from ISACA and BSI and carried out by experienced and certified specialists

Determination of cyber security exposure

Assessment of the extent to which critical processes, systems, and dependencies are potential targets of cyberattacks or acts of sabotage

Consideration of the entire organisation

A holistic view of the organization, including critical dependencies, connected networks, and relevant service providers and supply chains—a key aspect of critical infrastructure resilience

Non-invasive testing

Reviews of documents, inspection of IT and surveys, no intervention in technical or organisational processes

Regardless of the current security level

Guidance for decision-makers, management, and KRITIS officers to serve as a sound basis for decisions regarding security, resilience, and investment measures

Conformity to standards

Compliant with recognised standards (IT baseline protection, ISO/IEC 27001, COBIT, PCI DSS)

Please feel free to contact us

Portrait von Ansprechpartner Robert Stricker

Robert Stricker
Abteilungsleiter Security Consulting