Security & Compliance
Information Security & Compliance
Requirements from the Information Security Act (ISG), the reporting duty to the BACS, the Data Protection Act (DSG) and – for business relationships with the EU – NIS2 are translated into concrete technical and organisational measures.
Scope of services
Understand the requirement first, then act.
A gap analysis shows what is already in place and what is missing, forming the basis for a prioritised action plan. This applies to operators of critical infrastructure with a reporting duty to the Federal Office for Cybersecurity (BACS, formerly NCSC) as well as to SMEs that fall indirectly under NIS2 as suppliers to EU companies. The consulting is technical in focus and does not replace legal advice.
- Mapping which requirements apply (ISG, NIS2, DSG)
- Gap analysis of existing measures
- Preparation for the reporting duty to the BACS
- Implementation of technical and organisational measures
Process
How it works.
01
Check applicability
It is checked whether, and to what extent, NIS2 applies.
02
Assessment
Existing technical and organisational measures are recorded.
03
Action plan
Gaps are named and ranked by priority.
04
Implementation
Technical measures are introduced and documented.
Benefits
What you gain.
Orientation
Clarity on which requirements actually apply.
Planned implementation
A prioritised plan instead of rushed, scattered action.
Technology with evidence
Measures are implemented and documented in a traceable way.
FAQ
Good to know.
Is my company affected by NIS2?
That depends on sector, size and turnover, among other things – and on whether business relationships with the EU exist. The NIS2 check on this page gives a first, non-binding assessment, including the separate reporting duty for critical infrastructure in Switzerland. Applicability is checked together at the start.
Does this replace legal advice?
No. The advice is technical in focus; legal questions belong with a legal adviser.
Where should one start?
With an assessment: many measures are often already partly in place and just need completing and documenting.
Related
Related services
Next step
Let's talk about your IT.
A first conversation clarifies the starting point and possible next steps.