Solutions for Cyber Security & Compliance

NIS2-Compliance

As an affected organisation, we know which gaps need to be addressed when implementing the EU Directive on Critical and Important Infrastructure. We assess your compliance status under NIS2, establish minimum measures and put in place incident reporting processes. SHE provides risk analysis and technical measures.

• Scoping assessment and gap analysis against NIS2 minimum requirements
• Implementation of NIS2 minimum measures
• Set-up of reporting processes for 24-hour and 72-hour deadlines to the BSI

DORA-Ready

Consultancy for financial services providers

Practical support from a DORA-Ready company

The requirements of the Digital Operational Resilience Act (DORA) present financial services providers and their IT service providers with new regulatory challenges. We support you in the structured implementation of the DORA requirements – from analysis and the review of existing processes through to the optimisation of your documentation.

As a DORA-Ready company, we have first-hand experience of the regulatory requirements. We help you adapt existing security and governance structures to meet DORA requirements and establish transparent, auditable documentation.

Our services in the area of DORA:

• Review and optimisation of existing documentation, policies and processes
• Support with the implementation of DORA requirements in the areas of ICT risk management, governance and information security
• Structured documentation and practical recommendations for action
• Practical advice from a DORA Ready company with experience in compliance and information security

Business Continuity Management (BCM)

Business continuity for critical processes, tested and practical.

We support you in setting up your BCM system. From business impact analysis and contingency plans to regular exercises. SHE documents critical processes, recovery time objectives and alternative working methods.

• Business impact analysis and definition of critical business processes
• Development of contingency and recovery plans
• Tabletop exercises and crisis management team simulations with your management team

Tabletop Exercise Workshop

Business continuity for critical processes – tested and audit-ready

We facilitate sector-specific cyber scenarios for your senior management, crisis management team and IT managers. Under realistic pressure, you can test whether escalation, communication and recovery procedures actually work within your organisation. SHE incorporates experience from real-life cyber incidents into every scenario and provides audit-ready records for your compliance programmes.

• Scenario design tailored to your sector, maturity level and regulatory requirements
• Facilitated delivery as an on-site workshop or in a hybrid format
• Audit-ready documentation as evidence in accordance with ISO 22301, ISO 27001 and NIS2 §30 BSIG
• Prioritised improvement backlog with responsibilities and deadlines following each exercise

Incident Response

Immediate readiness in the event of an emergency, with a dedicated team and SLA

You enter into a retainer agreement under which a designated SHE team is familiar with your infrastructure. In the event of an incident, we initiate forensic analysis, containment and recovery within 15 minutes. Expertise gained from over 3,000 incidents per year.

• Retainer agreement with a designated team and a defined service level
• Response time of under 15 minutes until the first containment measure is implemented
• Forensic analysis with reports for insurance companies and regulatory authorities
• Incident response playbooks and tabletop exercises for your crisis team

Web Application Firewall (WAF)

Protection for public applications against the OWASP Top 10 and bot traffic

We configure and operate WAF solutions using F5 and Fortiweb. We fine-tune rule sets for each application, review false positives with your development team and report suspicious patterns from the SHE SOC.

• Protection against the OWASP Top 10, bot traffic and Layer 7 DDoS attacks
• Managed solutions from F5 and Fortiweb
• Rule tuning per application, coordinated with your development team

Cloud Security

Comprehensive protection for Azure, AWS and Google Cloud based on the Zero Trust model

We harden identities, networks, workloads and storage in line with Zero Trust and the principle of least privilege. We integrate multi-cloud set-ups with our 24/7 SOC.

• Security hardening for Azure, AWS and Google Cloud
• Cloud Security Posture Management with continuous drift monitoring
  Integration with the 24/7 SHE SOC, including threat detection and response
• Compliance reports for NIS2, ISO 27001 and the GDPR

Endpoint Security (EDR)

Endpoints as a robust line of defence against ransomware and malware

We operate EDR platforms from our partner CrowdStrike, on a fully managed or co-managed basis. SHE handles roll-out, policies, threat hunting and incident containment from its German SOC in Ludwigshafen.

• Managed EDR with CrowdStrike, operating 24/7
• Automatic isolation of compromised endpoints
• Threat hunting by the SHE SOC, in German
• Roll-out, policy management and reporting – all from a single source

Identity & Access Management (IAM)

Transparent and controlled access to your systems

We manage permissions via Microsoft Entra ID and BeyondTrust. SHE designs role models, implements just-in-time access and secures logins with MFA and conditional access. Privileged accounts are managed via PAM with session recording.

• Role models and authorisation structures based on the principle of least privilege
• Just-in-time access via Microsoft Entra ID and BeyondTrust instead of static authorisations
• Privileged access management with session recording for critical accounts
• Multi-factor authentication and conditional access for all critical systems