Consulting

With our proven 360° IT Review, we assess the ACTUAL situation of your IT infrastructure in all relevant areas and create the associated implementation roadmap in a vendor-neutral manner with a holistic 360° all-round view from the outside.

Our approach and working methods are based both on standardized and established procedures, but above all on our best practices, trends and the extensive experience of our IT experts.

With our security assessment, management and training services, we can assess and mitigate the risks that compromise our clients’ data and information and impact your mission-critical processes and image.

We can also help you implement the right security processes and procedures to seamlessly and efficiently improve your security posture without disrupting your daily business.

The corporate strategy and other internal and external guidelines of the organization are elementary for defining the criteria for risk classification and assessment according to the Enterprise Risk Management (ERM) approach.

We support you in defining the strategic risk indicators (risk policy, risk catalog) and in creating the link between strategy and operational risk management.

The goal is to describe how IT should align itself in order to optimally support the specified business requirements / business objectives. Subsequently, implementable measures and a roadmap are defined.

With the introduction of RBAC, a cost-effective and simple administration of users and their rights is achieved. Much more important, however, is the clear assignment of roles with regard to compliance requirements, such as segregation of duties or authorization certifications.

For automatic provisioning in an IAM system, role creation according to RBAC is mandatory. It is so central that we see the development of an RBAC-oriented role model as a guarantee for an efficient Identity & Access Management system.

According to the new requirements of the EU-DSGVO and Swiss revDSG, personal data is information that relates to an identified or identifiable person; e.g. a name, a photo, an email address, bank details, location details, medical information or a computer IP address.

So imagine a Swiss company, e.g. a bookseller, that offers an online store in addition to its store in the center of any city in Switzerland. Through this online store, customers – from another European country – order books. Thus, the bookseller is obliged to comply with and implement the requirements of the GDPR.