References

Trust through strong brands
and satisfied customers

Challenging projects. Satisfied clients.

Whether in the rail, finance or energy sector – our experts advise, evaluate, implement and increase the level of security across all industries with the highest level of expertise. We take individual customer requirements into account and offer customer-specific solutions that not only meet current security standards, but are also up to future challenges. Our many years of experience and successful cooperation with leading companies confirm our competence in developing robust cybersecurity strategies.

OT security in the railway sector

Project management and consulting OT security for the railway infrastructure to secure communication connections in control and safety technology

Conformity testing of IT and OT components in railway infrastructure (KRITIS)

Safety analysis and consulting for product development of a passenger information system for rail vehicles

Consulting on the introduction of an attack detection system for OT and IT systems

Consulting the project teams and implementation of safety requirements for conformity according to IEC 62443

IT auditing in the financial sector

Audit of a hybrid cloud after successful migration from the on-premise infrastructure as lead auditor

Creation of key controls and test plans using the Cloud Controls Matrix (CCM) and industry-specific requirements such as KAIT and BAIT

Auditing of technologies such as backup, access management, security of the hybrid cloud infrastructure

Auditing of the internal security department and development process (SDLC)

Preparation of management reports and reporting to the Board of Directors as well as review of the measures implemented

Complex security analyses

Comprehensive security analysis of the external and internal IT infrastructure of a client in the legal sector

Determination of publicly available information and derivation of the resulting threat situation

Analysis of external interfaces for attack vectors, attack patterns and vulnerabilities

Preparation of a final report and definition of the security level as well as formulation of detailed measures to minimize risks

Investigation of the complex internal infrastructure at 6 different locations

NIS2 and ISO 27001

Consulting and extension of an existing information security management system (ISMS) according to ISO 27001 and NIS2 requirements of an electrical engineering manufacturer

Auditing of the technical and organizational measures of the IT infrastructure and the physical security of locations in the DACH region

Conducting internal audits and supporting external audits

Review and follow-up of measures from an ISO 27001 audit

Regular communication and reporting to relevant stakeholders and management

Single reference

Find out more about a project by SmartTECS Cyber Security IT experts here.

Customer requirement

Development of customer-side processes, company standards and creation of documents in the area of cyber security for IT components within rail vehicles

Project description

Creation of process-specific information security documents
Application of the customer-side “Cybersecurity Authorization Process”
Support in the development of company standards
Conducting security analyses (e.g. risk and threat analyses) in accordance with current industry standards

Branch of industry

Rail vehicle technology

Task

Support in the area of cyber security and conducting analyses in the context of the customer’s “Cybersecurity Authorization Process”

Methods and tools

Microsoft Threat Modelling Tool
Standard “DIN EN IEC 62443”
Standard “TS 50701”

Customer

Over 20,000 employees