External support for your data compliance processes

I offer you data compliance services with a clear cost structure with my all-round service as an external IT security service provider. This reduces your unforeseeable compliance costs and risks.

If your administrators do not have time for data security and data compliance, I document where your sensitive data is located and prioritise its protection based on a risk and damage assessment. I carry out these tasks completely independently in collaboration with your IT department and, if necessary, your external software service providers. In the next step, I analyse where security measures are missing in order to meet legal requirements and where the risks of a data leak, data manipulation or failure need to be minimised. At the end of this phase, I report to you on the results and the next steps.

I then take complete care of your data compliance tasks, data risk prevention and incident investigation. In dialogue with your IT staff, I learn how your systems normally behave, generate reports for your auditors and authorities, create alerts to monitor your sensitive data, configure blocking rules and observe their effect in interaction with the users of the systems. I also find the root cause of abnormal behaviour, perform forensic analysis of incidents and propose and implement new security measures.

When you start a new IT project, I advise your IT management and your external IT service providers with the aim of reducing the costs of implementing data compliance and data security. I look for a balance between the requirements of data protection and IT security officers and stakeholders and the implementation options of your IT team, taking into account the budget and deadlines. I also support your IT teams in minimising the storage and processing of sensitive data, implementing data security measures and preparing documents for auditors.

To summarise, I offer you:

• Independent documentation of systems with sensitive data in consultation with your IT department and your external software service providers
• Continuous analysis of the necessary measures to achieve compliance
• Generation of reports for your auditors
• Answering official enquiries
• Monitoring your databases with sensitive data
• Forensic investigation of incidents
• Continuous implementation of measures to increase your data security
• Advice on privacy-by-design principles for new projects
• Preparation of documents for auditors for new and legacy systems