Data Protection & Compliance

We identify areas of action on the way to the Microsoft Cloud and derive measures to ensure compliance (DSGVO, works council) when using Microsoft services. We accompany and sup-port our customers in the preparation and implementation of data protection measures in the Microsoft environment as well as the creation of necessary documentation (data protection concept, directory of processing activities, concept for providing information and deletion).

We identify areas of action on the way to the Microsoft Cloud and derive measures to ensure compliance (DSGVO, works council) when using Microsoft services. We accompany and support the preparation and implementation of data protection measures in the Microsoft environment and the creation of necessary documentation (data protection concept, directory of processing activities, concept for providing information and deletion).

We train employees in interactive workshop formats, thus conveying the basics of handling personal data and raising awareness using concrete practical examples. The training is provided by certified data protection officers.

We review and evaluate the data protection documentation (data protection concept, directory of processing activities, order processing contracts, technical-organizational measures, concept for providing information and deletion). We also assess current developments in data protection law and advise different stakeholders, such as DPO, IT, FB, works council and staff council.

We offer Zero Trust Envisioning Workshops to create an understanding. We take over the development of an individual Zero Trust strategy and implement this Zero Trust strategy and roadmap together with the client.

We advise on general questions in the area of information security as well as on the special requirements of information security in the cloud. The initiation, planning, implementation and documentation of the information security management system is carried out in accordance with ISO 27001.

Secure identities are the first step into the cloud. Whether zero trust, single sign-on or governance processes – we design, implement and optimize solutions based on the latest Microsoft technologies such as Azure AD.

We design and implement threat protection strategies. The technological basis is formed by Microsoft 365 technologies such as Microsoft Defender for Endpoint, Defender for Office, Defender for Identity and Microsoft Defender for Cloud.

We plan and execute automated phishing campaigns, take care of sustainable change management to strengthen cyber security awareness, and ensure employee training and awareness on data protection.