We favor the holistic approach

Information is a critical resource in companies, authorities and organizations. This is why information security is a key factor for your business success due to the increasing digitalization of business models and processes. Information security is defined as the practice of protecting information (both physical and digital data) from unauthorized access, use, alteration, loss or interference. Cyberattacks can pose an existential threat to companies and have a lasting and serious impact on their reputation. The failure of IT-supported services – even if it is only temporary – can lead to significant costs.

From our experience, we know that a holistic approach offers the best possible protection for your data. Our information security management system (ISMS for short) combines technical security mechanisms with organizational measures. It not only includes the physical protection of your company, access control to files or compliance with laws and guidelines. Employees must also work responsibly at their desks so that sensitive data does not fall into the wrong hands. Sustainable implementation and continuous improvement are the hallmarks of a reliable ISMS.

With us, you can proactively prevent, detect and fend off security threats. Because nothing is more important than protecting sensitive data while complying with all standards.

Robust information security with us

Since 2022, all clinics and hospitals have been obliged to implement appropriate measures to increase IT security. This is exactly what an ISMS does. It also describes the process described in § 75c SGB V para. 2 industry-specific safety standard for medical care (B3S). In addition, there are other norms and standards for the management of information security, such as the national IT baseline protection of the German Federal Office for Information Security (BSI). This standard is primarily aimed at establishing an actual security level and is primarily used in the government environment.

The internationally recognized standard in the field of information security is ISO 27001. ISO/IEC 27001 contains a comprehensive collection of best practices for the management of information security. A particular advantage of ISO/IEC 27001 is its worldwide distribution and the possibility of individually designing the ISMS to be modeled. The flexible extension of the standard to include use case-specific scenarios, for example for cloud services (ISO/IEC 27018), is also an advantage.

Everything from a single source

Development of an ISMS

We favor the holistic ISMS approach. Your processes are aligned company-wide with the required security level, taking into account all security-relevant processes.


Implementation of an ISMS in accordance with the ISO/IEC 27000 series or the BSI basic protection compendium.


With the help of an ISMS, legal requirements or the requirements of your own IS audit can be implemented and continuously adapted.

Holistic approach

Maximum protection of the confidentiality, availability and integrity of your information and resilience of IT systems (in accordance with EU GDPR)

Creating transparency

Our ISMS supports your organization in creating transparency with regard to risks arising from business and IT processes.

Advice and support

Implementation of the BSI's technical guideline on "Security requirements for digital health applications" (BSI TR 03161).

Analyses and tests

Carrying out vulnerability analyses and penetration tests. The results of the risk analysis process and/or a so-called business impact analysis can serve as a basis for decision-making. This avoids inadequate or misguided investments that fail to meet actual needs. GAP analysis/assessment in accordance with ISO/IEC 27001 based on the requirements of the IT Security Act.


Establishment and operation of a contact point in accordance with Section 8b (3) of the BSI Act, so that the requirement to be reachable at all times as the operator of a critical infrastructure is met.


Appointment of an external Information Security Officer (ISO).

Your advantages at a glance


Our external Information Security Officer (ISO) provides support with the systematic monitoring and documentation of ISM or takes on all tasks in this area.


Operation of an information security management system (ISMS) in accordance with various standards (e.g. TISAX, ISO/IEC 27001, KAIT and BSI standard).


Continuous improvement of the security of your information assets through systematic and automated monitoring processes.


You have a contact person for your information security issues.


Certified IT security and information security.

Tests & analyses

Conducting compliance audits and risk analyses.


Close cooperation with all departments involved.

Knowing what matters

Our team of experts is familiar with the various challenges associated with the introduction of an ISMS and knows how to overcome them. Among other things, it supports you in identifying and assessing risks, defining suitable security controls and integrating security practices into existing business processes. We offer you proven methods to make the implementation process run smoothly. Our goal is not only to meet your compliance requirements, but also to ensure that you can successfully integrate your risk management and compliance management into your organizational strategy. Put your trust in us: we will guide your company competently on the path to robust information security and operational resilience.