Attackers do not look for the biggest, but for the most reachable, and that is often the Mittelstand: grown IT, few hands, long supply chains. Add obligations such as NIS2 and insurers who want to see evidence. We bring security to a level that stands up to auditors and does not paralyse operations, and so create the basis on which cloud and AI become defensible in the first place.
Security is not a product you buy, but an order you keep to. We start where the biggest damage is most likely.
Which systems are critical, where are the gaps, what do NIS2, insurers and customers demand? At the end there is a priority list, not a hundred-page risk analysis.
Multi-factor login, clean permissions, separated networks, verified backups. Whoever gets a door open is not standing in the whole house right away.
Monitoring that reports anomalies, an emergency plan that has been rehearsed, and contacts who know what to do when it matters, on a Sunday too.
Most attacks start trivially: a phishing email, an old password, a server without updates. What matters is how far the attacker gets afterwards. Switch protection layers on and off, and see where the attack gets stuck.
The order is no accident: Multi-factor login and backups stop the majority of real incidents, long before expensive technology becomes necessary.
01
At the end you haveThe priority list: what first, what next, what can wait, with effort and obligation per item.
Inventory, access, backups, dependencies on service providers, and a view from outside, as an attacker would have it. That becomes an honest priority list, not a fear presentation.
02
At the end standsThe basis: multi-factor login, verified backups, separated networks, tidy permissions, documented.
The measures in the order of their effect, together with your IT, in stages that do not disrupt operations. Every measure is verified, not just set up.
03
At the end there runsMonitoring with clear alarms, a rehearsed emergency plan and evidence that auditors and insurers accept.
Monitoring, regular rehearsals of the emergency, updates under control, and reports that management, auditors and insurers understand. On request we take over operations.
The most expensive technology does not help if the admin password has been the same for years. We first close the doors attackers really come through, and only then do we talk about finer points.
NIS2, customer audits, cyber insurance: whoever can prove what they do saves time and premium. We document so that the evidence is already there at the next audit.
The situation assessment answers exactly that, without a fear presentation.
Attacks run automatically today: programs look for open doors, not for big names. Whoever is reachable gets hit. A solid baseline makes you uninteresting for the mass of attacks, and that is exactly the goal.
Many mid-sized companies directly, many more indirectly via their customers, who demand evidence from suppliers. We clarify in the situation assessment what applies to you, and build the evidence so that it arises on the side, not as a separate project.
Follow a plan that was rehearsed beforehand: who decides, who disconnects systems, who informs customers and authorities, where the backups are. We create this plan with you, and rehearse it before it is needed.
Usually not. The basis can be built with your IT; monitoring and response around the clock we or a partner take over as an operations service. What matters is that someone is watching, not where they sit.
AI and cloud are only as secure as the access, data and rules beneath them. Whoever lets agents loose on ERP and CRM needs clean permissions and logs, exactly the basis we build here. Security is the prerequisite, not the brake.