References

Audit of an enterprise environment (Global), using an external & internal Security scan completed by an Audit of the E-mail system

Penetration test of a device under mobile device management (MDM) control and of an app with partial code review, as well as penetration test of an MDM server

ISO 27002 security audit; analysis of the security level by means of a questionnaire tailored to customer needs, verification by means of an interview and document review; bespoke suggestions for improvements on information security incl. risk-based and prioritized measures.

ISO 27002 security audit; analysis of the security level by means of a questionnaire focused on access security, verification by means of an interview and document review; bespoke suggestions for improvements on information security

Technical security audit of the entire IT infrastructure: testing of the physical security of the main locations as well as in selected branch offices, penetration test of domains accessible from outside, conceptual and technical tests of security-relevant components (including firewall, VPN access, proxy server, mail server, network zoning), vulnerability scan of the internal IT infrastructure, establishment of a continuous data breach alert ISO 27002 Security Audit; survey of the security level of 5 organizations by means of a questionnaire adapted to the customer's wishes, verification by means of an interview and document review; tailor-made suggestions for improvement in information security including risk-based, prioritized measures and an overview of the entire organization

Penetration Test of a mutli-tenant chat solution

Security Scan DMZ and Penetration test of additional systems

Evaluation of the current Cyber Security Governance and organization, comparison to competitors and creation of a new Cyber Security Governance strategy

Training of the IT security manual for all IT employees with focus on operations and developers/devOps enriched with live hacking demos and practical examples

Windows 10 Client Audit

Review of the security architecture of an application for the management of health data and configuration of an Azure environment for the hosting of the application

Global Product Cyber-Security Organization (analysis and proposed solutions)

Technical and conceptual audit of an Enterprise Mobility Management (EMM) solution

ISO 27002 security audit; analysis of the security level by means of a questionnaire focused on access security, verification by means of an interview and document review; bespoke suggestions for improvements on information security

Incident response exercise (analysis of existing processes, definition of the roles to be part of the exercise, creation of the storybook, observation and evaluation of the all-day exercise with international participation, preparation of recommendations, various meetings)

Security design, architecture review, audit firewall ruleset and security configuration review of the involved clients in a radio oncology department

Checking the external attack channels of using security scan on the servers accessible via the Internet, firewall ruleset audit and advanced mail test

ISO 27002 security post-audit focusing on access control, mobile devices, encryption procedures, change, release and incident processes, firewall management

IT security audit in two phases External: webmail penetration test Internal: ethical hacking based on various scenarios

Penetration tests from different vectors and WLAN configuration verification