IT security • iSYS - Technology for the People

Achilles’ heel cyber security.

Cyber attacks are a fundamental threat for many companies. Attacks on inadequately protected applications or the unplanned disclosure of sensitive data repeatedly lead to major damage.

Our information security management ensures that the applications we create meet high data protection and information security standards. We regularly have the effectiveness of the measures we have taken confirmed by an independent auditor.

Our services

Sensibilisation

The basis of any security architecture is that all employees react to potential threats with their eyes open. To this end, we regularly carry out appropriate awareness measures.

Independent assessment of our protection status

We regularly have the effectiveness of our implemented measures reviewed in an independent audit.

Our ISMS system is based on the principles of the BSI’s IT baseline protection. We implement these principles in a practical manner through a package of measures tailored to the needs of our customers and continuously develop them further.

Secure software development

Today, modern IT systems and applications must be developed from the ground up to be secure and data protection-compliant. We comply with applicable IT security standards and data protection standards (e.g. privacy-by-design, privacy-by-default) right from the development stage.

Risk analysis

If we process personal data using new technologies or if there is any other high risk for data subjects, we support the software design with a data protection impact assessment (DPIA) in accordance with Art. 35 GDPR.

Use of software components

During development, we check the dependencies of the libraries and components used and thus avoid weak points. We support modern standards such as SBOM (Software Bill of Materials) in order to visualise dependencies transparently.

Your benefits

Secure software

Many vulnerabilities in software products can already be avoided during development. Our approach enables us to achieve a high standard of security right from the design and development of applications. The earlier vulnerabilities are found in the development process, the less effort is required to fix them.
Secure infrastructure

A secure infrastructure is a prerequisite for the development and operation of secure applications. Our aim is to realise a high level of security for the IT systems we operate at cost-effective conditions.
Avoid negative surprises

As part of a risk analysis, we identify risks and work with your specialist departments to develop measures to avoid or minimise risks. We support secure operations through technical measures (e.g. monitoring) as well as clear and comprehensible internal processes.
Create trust

In order to maintain a high level of security in the fast-moving IT world, security measures must be regularly scrutinised and updated. We work continuously to optimise our systems and processes in a recurring Plan-Do-Check-Act cycle (PDCA cycle). This documentation also enables us to demonstrate our security level to our customers.

Fields of application

Software development

Selection of software components and software libraries
Software Bill of Materials (SBoM)
Automated software tests
Automated analysis of dependencies
Automated testing

Infrastructure operation

Selection of systems and applications according to technical and commercial aspects
Creation of security and data protection concepts
Risk analysis
Documented processes for a verifiable level of maturity

Handling sensitive data

Examination of the data protection requirements
Examination of the necessity and implementation of a data protection impact assessment (DPIA)
Creation of security and data protection concepts

Cloud deployment

Selection of cloud service providers according to technical and legal aspects
Pre-check of service providers
Setting up security measures for cloud operation

Research

Compliance with regulatory requirements relating to data protection and IT security
Management of research data
Consideration of legal requirements for new software and AI systems