Over 400 organizations (including several Fortune Global 500 companies) in Europe and overseas and across all industries trust our vendor- and product-independent cyber security services.

For reasons of discretion, we do not list the names of our clients. However, we will be pleased to provide references and letters of recommendation following consultation with the organizations concerned.

Due to the increased sensitivity we do not state or list here any references of the 150+ projects in the fields of digital forensic examinations and expert’s reports.

The majority of our projects since 2003 is listed in the overview, which includes IT forensics projects in the context of company security trainings and concepts.

2019

Service Provider for Industry and Public Authorities

Workshop regarding the implementation of an ISMS (ISO27001/2) and information classification. Preparation of drafts for acceptable use policy and classification framework

Switzerland

Media Group

Consulting regarding cloud-web-application-firewall authentication

Switzerland

Software Developer

Creation of a self assessment questionnaire for cloud providers on the basis of ISO 27002 and 27017. Support of the self assessments according to the created questionnaire as well as CAIQ

International

Travel and Transport Company

IAM audit focusing on processes and controls in the Windows AD environment. Analysis of the security level on the basis of ISO 27002, verification by means of an interview and document review; bespoke suggestions for improvements on information security incl. risk-based and prioritized measures

Switzerland

Real Estate Group

Definition of controls and creation of policies in order to address audit findings (e.g. patch management policy, penetration testing policy, third party/cloud assessment procedures and IT desaster recovery)

Switzerland

Media Company

Consulting regarding cloud-web-application-firewall authentication

Switzerland

Cantonal Administration

Conduct workshops for an information security strategy based on existing documentation and concepts. Subsequent drafting of the information security strategy

Switzerland

Asset Consulting

General security assessment consisting of a security scan of the internal network, penetration tests of selected internal and external systems, and an audit of the guest WLAN

Switzerland

Manufacturer of injection systems

ISO 27002 security audit; analysis of the security level by means of a questionnaire tailored to customer needs, verification by means of an interview and document review; bespoke suggestions for improvements on information security incl. risk-based and prioritized measures.

Switzerland

Tool Manufacturer

Security Audit of the communication channels of a construction tool

International

Retail Group

Security audit of an authentication process

Switzerland

Power Supply Company

Audit of a workflow B2C implementation

Switzerland

Sanitary Technology Group

Windows 10 Client Audit with recommended hardening measures

International

Insurance Company

Review and revision of a detailed policy based on ISO-27001

Switzerland

Provider of Energy Supply

Review and adaption of information security documents (information security policy and acceptable use policy)

Switzerland

2018

Global Mobility Provider

Web application penetration test of an external project management software as well as cloud hosting evaluation of security aspects when using this Software as a Service (SaaS) in a private cloud of the software provider

Switzerland

Application Development Company

Workshop for developers on security risks in web applications with a brief introduction into the OWASP Top 10 and selected vulnerabilities to exploit themselves

Switzerland

Private Bank

Technical consulting concerning certificate pinning over WebRTC

Switzerland

Sanitary Technology Group

ActiveDirectory security workshop

International

Pharmaceutical Group

Global Product Cyber-Security Organization (analysis and proposed solutions)

Switzerland

page  1  of  16