ISMS implementation and certification
Based on BSI IT-Grundschutz and ISO 27001, with a focus on patient data and KRITIS requirements.
AI-generated
Industry
Healthcare
IT consulting for statutory health insurers, hospitals and physicians' associations
Hardly any other industry combines regulatory pressure, data sensitivity and the need for digitalization as intensely as healthcare. We know this environment from many years of project work and advise where mistakes are not an option.
Excerpt of services
From TI connection to certification.
Whether health insurer, hospital or physicians' association: we combine information security, regulation and digitalization into an approach that works in day-to-day operations.
Telematics infrastructure
Advice on TI connection, electronic patient records (ePA), e-prescriptions and ISiK interfaces in line with gematik specifications.
NIS2 and KRITIS implementation
Gap analysis, action plan and implementation support for operators in the health sector.
KHZG projects
Design and management of digitalization projects under the funding categories of the German Hospital Future Act (KHZG).
IT strategy and roadmap
Target picture, principles and roadmap, aligned with the transformation goals of the health insurer or hospital.
Interim CIO and interim CISO
Executive functions on a temporary basis, with proven experience in statutory health insurance and hospitals.
01
Facility
Hospital information system with ISiK interfaces or practice management system
02
Access
Connector or TI gateway, secured as specified
03
Telematics infrastructure
Closed network of the German healthcare system, operated according to gematik specifications
04
Applications
ePA, e-prescription, KIM and insurance master data
Schematic illustration. We support connection, security concept and operation in line with gematik specifications.
Project examples
Reference excerpt, anonymized for good reason.
Our project experience in healthcare is more extensive than shown here. Most of our mandates are subject to strict confidentiality agreements, especially with statutory health insurers and critical infrastructure operators, where publicly known security architectures pose a risk in themselves.
STATUTORY HEALTH INSURER · NATIONWIDE · NDA
ISMS implementation and ISO 27001 certification
Implementation of a complete ISMS based on BSI IT-Grundschutz and ISO 27001 for a statutory health insurer with more than 500,000 insured persons. Protection requirements assessment, risk analysis and implementation support.
UNIVERSITY HOSPITAL · TERTIARY CARE · NDA
IT strategy and digitalization roadmap
Development of a multi-year IT strategy with target picture, principles and prioritized measures. Advice at CIO level, integration of the KHZG funding categories into the roadmap.
ASSOCIATION OF STATUTORY HEALTH INSURANCE PHYSICIANS · STATE LEVEL · NDA
NIS2 readiness and KRITIS preparation
Gap analysis against NIS2 and the KRITIS Regulation, preparation of the security concept and action plan. Advice on reporting obligations under the BSI Act (BSIG) and alignment with BSI requirements.
The project profiles are fully anonymized. We provide complete reference documentation, including named contact persons on the client side, confidentially in tender procedures and on qualified request.
Related services
Cybersecurity & IT Security
ISMS, NIS2 and KRITIS compliance, DevSecOps and security architecture.
Learn moreIT Strategy & Transformation
Target picture, gap analysis and roadmap, through to implementation support.
Learn moreResponsible AI
Use cases, governance under the EU AI Act and enablement of your teams.
Learn moreLet us talk about your project.
Discreet, direct and straightforward.