FAQ
Frequently Asked Questions
Answers to the most common questions about our security solutions and services.
What is information security and why is it important?
Information security protects all your information from unauthorized access, tampering and loss. That covers digital, physical and organizational information. It matters because firms rely more and more on digital processes. At the same time, cyberattacks are getting more frequent and more advanced. Good, broad protection keeps your data confidential, intact and available.
What is the difference between IT security and information security?
IT security is about the technical protection of IT systems, networks and data. Information security goes further. It covers all types of information, including paper documents, spoken words and the way your firm is run. So information security is the wider concept, and IT security is part of it.
What is an ISMS and does my company need one?
An Information Security Management System (ISMS) is a structured way to manage sensitive company information. It is made up of policies, processes and tools. Every company that handles sensitive data gains from an ISMS. For some industries and certifications (e.g., ISO 27001), you even need one.
How much does a penetration test cost?
The cost of a penetration test depends on a few things. These include how many systems we test, the type of test (black-box, grey-box, white-box), how complex your setup is and how deep you want us to go. Contact us for a quote that fits your needs.
What is a SOC and why do I need it?
A Security Operations Center (SOC) watches your IT around the clock for security threats. It brings together modern tools, skilled security experts and proven processes. That way, it can spot cyberattacks early and fend them off. A SOC matters most for companies that need 24/7 protection.
What does an external Information Security Officer (ISO) do?
An external ISO takes charge of information security in your company. You do not need to fill a full-time role for this. The external ISO writes security policies and runs risk analyses. They also plan security measures and make sure you meet legal rules such as GDPR and NIS2.
How long does it take to implement an ISMS?
Setting up an ISMS usually takes between 6 and 18 months. It depends on the size of your company, the processes you already have and the certification level you aim for. We guide you step by step through the whole process, from the gap analysis to certification.
What is the NIS2 directive and does it affect my company?
The NIS2 directive is an EU rule set. It makes cybersecurity rules stricter for companies in critical and important sectors. It affects many industries, such as energy, transport, healthcare, finance and digital infrastructure. In these sectors, it generally applies to companies with more than 50 employees or 10 million euros in revenue.
Do you also offer employee training?
Yes, we offer in-depth Cyber Awareness Trainings. They include hands-on sessions on how to spot phishing, social engineering, safe password habits and safe use of IT systems. You can book them as workshops, as online courses or as an ongoing awareness program.
What should I do during a security incident?
In a security incident, you need to act fast. Call our Incident Response Team right away at +49 (0) 2058 175 566 0. If you can, cut the affected systems off from the network. But do not change any evidence. Our team helps you contain the incident, analyze it and recover.