ISMS implementation and certification
Implementation and operation of information security management systems based on BSI IT-Grundschutz and ISO 27001, including protection requirements assessment and risk analysis.
AI-generated
Service 02
Cybersecurity & IT Security
Cybersecurity in a regulated environment is not a product but a discipline. We advise organizations in healthcare, energy and public administration on systematically securing their IT: from ISMS implementation and NIS2 compliance to secure software development with DevSecOps.
Starting point
The question is not whether an attack will come, but when.
Act before others force you to.
Cyberattacks on critical infrastructure and public IT systems are increasing: in frequency, professionalism and regulatory consequences. At the same time, requirements are rising. The BSI Act, the KRITIS Regulation, NIS2 and the BSI standards for secure software development demand sound concepts, not just documentation.
We support you from the security concept through to implementation, with experience in ISMS implementation, protection requirements analysis, DevSecOps adoption and the management of security projects in complex public authority and critical infrastructure environments.
Key services
Six focus areas, one level of security.
NIS2 and KRITIS compliance
Gap analysis, action planning and implementation support under the BSI Act and the KRITIS Regulation for critical infrastructure operators.
DevSecOps and Secure SDLC
Security across the entire development process: securing the CI/CD pipeline, SAST and DAST, threat modeling and secure code reviews following BSI recommendations.
Penetration testing and vulnerability analysis
Identification of real attack vectors in IT infrastructures, web applications and cloud environments.
Security architecture and Zero Trust
Design and assessment of network and system architectures, IAM structures and cloud security models.
Interim CISO and project management
Security responsibility on a temporary basis in public authorities, statutory health insurers and critical infrastructure organizations.
Approach
From findings to evidence.
Step 1
Determine your position
Gap analysis against NIS2, BSI IT-Grundschutz or ISO 27001.
Step 2
Assess risks
Protection requirements assessment and risk analysis for your procedures and systems.
Step 3
Implement measures
Prioritized action plan and management of the implementation through to operations.
Step 4
Prove effectiveness
Audit, certification and continuous improvement of the security level.
Why work with us?
Industry-specific, tailored and forward-looking.
Benefit from certified expertise, standardized service packages and an end-to-end security architecture. We approach cybersecurity in an industry-specific, tailored and forward-looking way, so that you can shape the digital transformation securely and confidently.
Cybersecurity starts with strong consulting and ends with measurable security. Let us secure your digital future together: proactively and in compliance with regulations.
Partner network
More than consulting, when your mandate requires it.
INTAC combines its own consulting expertise with a reliable partner network: specialized IT security laboratories, certified forensics service providers and leading auditing and consulting firms, including major international partners.
This allows us to lead complex tender procedures as general contractor, fully cover regulatory audit requirements and provide additional capacity when needed, without loss of quality and without conflicts of interest. Our core service remains independent, vendor-neutral consulting.
Partners and cooperationsIndustries
We advise where security is not optional.
In critical infrastructure, regulated industries and public administration.
Healthcare
Statutory health insurers, hospitals and physicians' associations: ISMS, BSI IT-Grundschutz, critical infrastructure in the health sector.
Learn morePublic Administration
Federal authorities, state administrations, municipal IT service providers and public contracting authorities.
Learn moreEnergy & Critical Infrastructure
Municipal utilities, grid operators and energy suppliers: NIS2, KRITIS Regulation and IEC 62443.
Learn more
Where does your organization stand on NIS2?
Arrange a confidential initial meeting with us.