Cyber Security Strategy Consulting for your business

Cyber Security affects the entire organization

Common to all of these regulations is a focus on the risk identification and management of the services and products, typically as part of a cyber security management system (CSMS). The identified risks serve as a baseline to define adequate controls and countermeasures. Over the lifecycle of the services and products, monitoring events and incidents to ensure a quick and effective reaction to newly identified system vulnerabilities must be set up. Another key point of the regulations is to consider security for the entire supply chain, where norms such as ISO/SAE 21434 or IEC 62443 can serve as a guideline or even prerequisite. It is important to mention that these regulations target both the organizations with their processes and policies as well as the services and products themselves.

ITK Engineering – your partner from strategy to engineering

We offer consulting services to help our customers navigate the regulatory requirements and set up their business to create secure products. ITK is not a traditional consulting company. Our origin is hands-on engineering. Thus, we know the ins and outs of efficient security development processes and interdisciplinary engineering and apply this knowledge also in our strategy consulting projects. With our expertise and experience of many successful cyber security projects across domains, we have supported customers in establishing complete cyber security management systems (CSMS) or security engineering processes that have passed regulatory audits, while being tailored to the existing (development) processes of our customers. Especially the customization factor is essential, considering the technological and cost differences between companies. Therefore, our aim is to take a pragmatic approach to cyber security instead of rolling out a standardized CSMS that might be over the top for many customers.

Our cyber security strategy consulting portfolio

• Strategy consulting for existing and upcoming regulations in different domains, like EU CRA, UNECE R155 and EU MDR
• Process definition based on industry norms, e.g. ISO/SAE 21434, IEC 62443, ISO 24089
• Templates for cyber security processes, e.g. cyber security plan, item definition, risk analysis, concept, production control plan, cyber security interface agreement, cyber security case, cyber security specifications
• Topic responsibility at customer, i.e. definition of strategy and implementation of corresponding program, afterwards full project responsibility with reporting to management, driving the individual workstreams and ensuring meeting timeline and milestones