Risk management systems (RMS)

A comprehensive risk management system is a valuable management tool for the identification, analysis, assessment and treatment of risks in IT and information security. Our well-founded and proven risk management methodology can be implemented according to your specific needs, even in other target areas such as physical security, production or infrastructure.

Our approach:

We competently support you in the structuring of a risk management system (RMS), tailored precisely to your company. During the entire process, our experienced experts take into account the specifics of your sector or organisation and work closely with your internal specialists, allowing you to fully concentrate on achieving your company and business goals.

An intact risk management system is the foundation not just for an ISMS in accordance with ISO 27001, but also for an ISO 22301-compatible BCMS. Our experienced risk manager supports you in the company-wide handling of risk management and can update the risk situation of your company at regular intervals and/or on demand.

Our services:

  • Risk assessment in accordance with ISO 31000 for all sectors of the company
  • Risk assessment in accordance with ISO 27005 for the information security management system (ISMS)
  • Risk assessment in accordance with ISO 80001-1 standards for medical products that are operated within IT networks
  • MaRisk for banks and insurance companies
  • Regular or on-demand identification of risks
  • Developing plans of action for risk management/risk governance