From cyber risks to digital resilience
From the checkup to the complete information security management system (ISMS): advice that adapts to your company, not the other way around.
Non-binding · 15 minutes · Free
See through complexity –
Building resilience
The digital threat landscape and ever-growing regulatory requirements present enormous challenges for companies. It is no longer enough to simply respond to incidents. Instead, proactive, systematic security management is required that meets legal requirements, closes technical vulnerabilities, and ensures the trust of customers and partners.
Key points of our information security consulting
We provide resources and expertise pragmatically, in a hands-on manner, and in a way that is tailored to the needs of our clients.
Marvin Süß
Consultant mip Consult GmbH
Non-binding · 15 minutes · without preparation
So Start your information security consulting with us
We look forward to working with you. Please do not hesitate to contact us.
Step 01
Free initial consultation
We offer a free initial telephone consultation to discuss with you the current state of information security in your company.
Step 02
Needs analysis
Together we understand the current state, risks, and goals – both technically and organizationally.
Step 03
Customized offer
Based on your current situation and the coordinated approach, we will create an offer that is tailored directly to your needs.
Step 04
Start of consulting
After signing the consulting contract, our information security experts will begin the consulting process.
Our packages for your
Information Security Consulting
In all packages
Multilingual support
Personal contact person
Certified information security experts
Additional services
Lawyers from Eggert & Partner Lawyers · Service in Germany · All prices are net excluding VAT.
Frequently asked questions
What is information security management?
The data protection management solely considers personal data for which appropriate technical and organizational measures must be implemented in accordance with Article 32 of the GDPR. The information security management, on the other hand, considers all data, all processing processes, and all processing systems, regardless of whether they relate to individuals.
The need for information security management arises not primarily from legal regulations (exceptions include KRITIS, NIS2-affected companies, and financial institutions affected by DORA), but from an individual assessment of one’s own risk or threat. Only those who know what information they need for what purpose and what the consequences would be if that information were lost or fell into the wrong hands can take appropriate measures to reduce the existing risks.
Typically, information security consulting includes:
The legally required technical data protection measures protect not only personal data but also other company data. There is a connection between the technical data protection measures and those of information security. Our experts in data protection and information security are happy to assist you in implementing technical and organizational measures or in establishing a holistic information security management system.
Is my company affected by NIS2?
German legislation implementing the directive provides for the classification of affected companies as „important“ or „particularly important“ institutions. An estimated 40,000 companies in Germany fall under the NIS-2 directive. From 50 employees or from 10 million euros in revenue or balance sheet value, the directive can apply to companies. Many online self-assessment checks only provide general results, which often overlook essential details. We thoroughly examine,
whether your company falls within the scope of the new regulations – the result of our legal analysis provides you with certainty and can serve as a powerful argument in dealings with clients and authorities.
When does a company need information security advice?
The need for information security management arises primarily not from legal regulations (exceptions include KRITIS, NIS2 affected companies, and financial institutions affected by DORA), but from an individual assessment of one’s own risk or threat.
The impact of NIS2 on an organization depends on its cybersecurity maturity: highly regulated industries such as healthcare may already meet many of the requirements, while less regulated sectors could face major challenges. Even organizations that are not directly affected by NIS2 could feel its impact if they are suppliers or partners of regulated companies. These companies must demonstrate the security of their supply chain.
Support me sofortdatenschutz.de with all your questions about Information security?
Our experts in data protection and information security are happy to assist you in implementing technical and organizational measures or in establishing a holistic information security management system.
