Information security management system

Would you like to reduce your organisation's cyber security risks to an acceptable level? Our experts can advise you on suitable measures. The basis is an information security management system (ISMS), for example based on ISO 27001, BSI IT-Grundschutz or CISIS12. A holistic approach is important to us. Take advantage of the best practices of our experienced and accredited consultants and our proven process models.

ISO 27001, BSI IT-Grundschutz and CISIS12

An information security management system (ISMS) aims to identify and analyse IT risks for an organisation and make them manageable through appropriate measures. There are various approaches to implementing information security. Materna provides advice and support for ISO 27001 as well as for IT baseline protection and CISIS12. For all approaches, we support the topics of maturity level determination, ISMS security documentation, internal ISMS audits and ISMS certification support. We also advise on the introduction of management systems for governance risk and compliance (HiScout modules IT baseline protection and data protection).

Many organisations are unsure about the maturity level of their information security, would like to increase the level of information security or require an internationally valid information security management system, e.g. to meet compliance requirements. We support organisations in the area of an ISMS with three objectives: Introduction, migration and transition.