Cybersecurity & Resilience
Would you be ready for a serious security incident?
IN BRIEF
Cyber resilience is an organisation's ability to fend off attacks, detect incidents early and keep critical processes running after an incident. It combines security governance, technical safeguards and rehearsed procedures for response and recovery.
When to involve us.
When NIS2 or DORA applies to your organisation, security responsibility is spread across IT, business units and service providers, or a serious incident has never been rehearsed, you need a clear assessment of where you stand.
We establish your baseline along critical business processes and the requirements that apply to you. We then prioritise measures for governance, the ISMS, the supply chain and recovery, and make senior management's accountability concrete. In exercises with management and business units, we test whether reporting lines, decisions and recovery hold up in a crisis.
What the work produces.
We agree on the scope around your goals, starting point and available capacity. The following elements illustrate what an engagement can include.
WHAT WE ADDRESS
- NIS2 and DORA readiness assessment
- Security governance, ISMS and supply-chain security
- Incident exercises and recovery planning
- Cryptography inventory and post-quantum roadmap
POTENTIAL OUTPUTS
Clear security accountability, prioritised measures and recovery plans informed by incident exercises. These help you address identified weaknesses and improve incident preparedness.
A focused starting point.
Existing security policies, results from audits or risk assessments, and a list of critical service providers. Senior management should be involved early, since NIS2 and DORA explicitly assign accountability to it.
The question first. Then the scope.
The first conversation clarifies the objective, deliverables and people involved. We agree whether the engagement covers design, pilot support or technical implementation, who takes on each task and how the deliverables will be assessed.
Discuss a starting point by emailWhy should we address post-quantum cryptography now?
Data encrypted in transit today can be intercepted and stored for decryption later by capable quantum computers. For information that must stay confidential for many years, this is already a risk. Replacing cryptographic methods in established IT landscapes also tends to take a long time. The US National Institute of Standards and Technology (NIST) published its first post-quantum standards in 2024, and European authorities such as Germany's BSI recommend starting the transition. The first step is an inventory showing where which cryptography is used and which data needs protection for how long. From that comes a roadmap that aligns the transition with renewals already planned.
Last updated: