Information Security

In a world that is increasingly permeated by digital technologies, the protection of sensitive data is of paramount importance. In this regard, guaranteeing classic protection goals (confidentiality, integrity, and availability) is just as essential as the legally compliant and user-friendly implementation of data protection and the reconciliation of security measures with business goals. Due to the resulting complexity, challenges frequently arise in the development, implementation, and review of security and data protection concepts, such as:

• Incomplete knowledge of laws, standards, and individual protection requirements
• Tensions between information security and feasibility
• Lack of trust in digital business models
• Exposure of sensitive data in networked systems, e.g., when migrating to the Cloud
• Insecurity when implementing the rights of data subjects (e.g., information, correction, and deletion) and the obligations as a controller (e.g., data protection impact assessments, privacy by design, and privacy by default) in accordance with the GDPR
• High effort for carrying out and verifying security and compliance checks (e.g., penetration tests, IT security assessments)

IT security: compliance checks of your systems and processes

We independently check the compliance of products, processes, and organizations with standards (e.g., ISO 27001, ISO 21434) and specifications.

Data security: technical solutions for data usage control

We offer solutions for easily classifying Microsoft Office documents and for the flexible masking and filtering of data.

Data protection: concepts for user-centered data protection solutions

We review data protection measures in terms of user-friendliness and develop concepts that reconcile security, data protection, and usability.

Cloud security: training sessions in our learning lab

We offer training and further education in the field of secure cloud computing, with a focus on common standards, best practices, pen testing, and usable security.

We advise and train our partners in the implementation of the new ISO/SAE 21434 “Road vehicles – Cyber Security Engineering” standard.

We also provide support in integrating cyber security engineering with safety engineering in accordance with the companion standard ISO 26262 “Road vehicles — Functional safety”, for example on the basis of “System-Theoretic Process Analysis” (STPA).

Learn more!

Artificial Intelligence is currently a hot topic. In this context, the security of AI systems against manipulation is essential. In addition, it is particularly important to guarantee issues such as transparency, explainability, etc. in AI systems.  

Learn more!