• Training on IT and information security
• Awareness of cyber risks
• Phishing and social engineering training
• Strengthening the security culture
• Regular learning campaigns
• Identifying security gaps
• Comparison with ISO 27001 / TISAX / KRITIS requirements
• Assessing organizational measures
• Prioritizing areas for improvement
• Recommendations for risk reduction
• Review of existing ISMS structures
• Controls according to ISO 27001
• Analysis of the effectiveness of security measures
• Documentation and audit report
• Recommendations for optimization
• Setting up an information security management system
• Defining roles, processes and policies
• Integration into existing structures
• Implementing technical and organizational measures
• Preparing for certification
• Ongoing ISMS support
• Monitoring of security measures
• Reporting and continuous improvement
• Adaptation to new risks and requirements
• Relieving internal resources
• Support with industry-specific security requirements
• Performing gap analyses and risk assessments
• Support through the certification process
• Preparing required evidence
• Ensuring regulatory compliance
