Do we really need Zero Trust?
If your employees work remotely, use cloud services, or process sensitive data: yes. Zero Trust is not a trend, but the answer to a changed threat landscape.
Cybersecurity, NIS2 & Compliance
Answers on NIS2 compliance, critical infrastructure protection, BSI Grundschutz, ISO 27001, Zero Trust architecture, Microsoft Defender and SOC build-up across DACH.
Answers
Common questions
Do you support certifications like ISO 27001?
Yes, we accompany you from the gap analysis through implementation to audit preparation. Many of our clients have successfully certified with our support.
What happens in the event of a security incident?
If you use our Managed Security Services, we react immediately. We analyze the incident, contain it, and support you in recovery. For everyone else, we offer incident response on demand.
Who is affected by NIS2?
NIS2 covers entities in 18 defined sectors (energy, health, finance, transport, digital services and others). Under section 28 BSIG: particularly important entities from 250 employees or more than EUR 50 million turnover plus more than EUR 43 million balance sheet total; important entities from 50 employees or with turnover and balance sheet total each above EUR 10 million. Suppliers and service providers may be affected indirectly through the supply chain. In Germany the directive is implemented through the NIS2UmsuCG, in force since 6 December 2025.
What are the NIS2 fines for non-compliance?
The German NIS2 implementation act (in force since 6 December 2025) provides for fines of up to €10 million — or up to 2% of total turnover where turnover exceeds €500 million — for particularly important entities, and up to €7 million or 1.4% for important entities. Management additionally bears a statutory duty to approve and supervise the risk-management measures and is liable for breaching it.
How long does NIS2 compliance implementation take?
A complete NIS2 compliance program typically takes 6–12 months: gap analysis 3–4 weeks, prioritized quick wins 2–3 months, structural measures (governance, risk management, incident response, supply chain security) 4–9 months. We focus first on the largest compliance gaps.
What is the difference between Zero Trust and a classical firewall solution?
Classical security relies on perimeter protection: everything inside the internal network is considered trustworthy. Zero Trust reverses this principle — every access is verified, regardless of location. Based on identity, device state and context. Particularly important for remote work, cloud services and SaaS — where the classical perimeter no longer exists.
What is the difference between Managed Services and classic IT support?
Managed Services are proactive: we monitor, optimize, and act before problems arise. Classic support only reacts when something is broken. This saves you downtime and stress.
How quickly do you respond to disruptions?
Our response times are defined in the contract and depend on the criticality. We respond to critical incidents within minutes, not hours.
Do you replace our internal IT team?
No, we complement it. Managed Services relieve your team of routine tasks so they can focus on strategic issues. We work as an extension of your team.
Services