Managers in the field of IT security depend on them to be always up-to-date with the legal requirements for compliance. However, you must not lose sight of a stable safety program.
A good data flow, a thriving company that remains competitive – that succeeds with the right attitude.
Rechtsanwalt Dipl.-Ing. Michael Horak, LL.M.
Security program for IT security
The security program is designed to help achieve corporate goals.
Companies should see compliance as a result and not just as a goal.
Rechtsanwalt Dipl.-Ing. Michael Horak, LL.M.
We have had the experience that elementary security measures are often careless. This makes compliance more difficult.
From a seminar for beginners to training on the way to Compliance specialist we offer different levels.
Security measures for IT security
The security measures range from updating the software to closing security gaps to correction and vulnerability management. But security hygiene in user accounts is also important, for example when employees leave the company, timely deletion of accounts is very important.
In addition, the use of two-factor authentication for remote access as well as proper mobile device management is one of the important security measures.
We combine IT law and compliance rights into one firm. Use our Expertise.
Top-down principle in IT security
In management, we are talking about a "top-down principle" that means "from top to bottom", meaning from general to detail, or more precisely from the board to employees. The top-down principle is required for professional security.
In our case, this means that we first need the support of the Board of Management, CEOs and the Executive Board, in order to then initiate activities for IT security. After that, it is important that all parties involved work well together to ensure data protection.
-
7 Deadly Sins of IT Compliance
Although legal departments and risk management are mostly responsible for compliance, the IT department is also involved in compliance matters to ensure security. Thus, IT compliance is an important component of the compliance matter. The plethora of regulations regulating IT systems and data is growing. Lawyer Dipl.-Ing. Michael Horak, LL.M. Responsibilities of the Chief Information Officer regulations, data,...
-
Deadly Sin 1: View Compliance Auditor as Opponent
A compliance auditor checks compliance with legal requirements or other guidelines in a private company or public institution during a compliance audit. The Chief Information Officer (CIO) is responsible for the information technology (IT) and computer systems strategies. An IT strategy is required to support the company's compliance goals. Companies are committed to the...
-
Death Sin 2: Excluding Exceptions
Bypassing the compliance rules can be risky. Sometimes, however, it is necessary to make exceptions and disregard the rules. In order to avoid any risk, you should therefore take precautions. We also advise you on compliance risks. Exceptions take into account exceptions in the compliance process, can be a very wise strategy. And that's...
-
Death Sin 3: Preparing a Bad Working Group
Knowledge, skills, experience – too little of it in a working group brings problems. A Chief Information Officer (CIO) should necessarily create a highly qualified Compliance Working Group. Insufficiently prepared teams can even be risky. The CIO is responsible for the strategies in the fields of information technology (IT) and computer systems with the aim of achieving the objectives of the...
-
Death Sin 4: Governance Structure Missed
Although companies control basic processes and controls, our experience often lacks governance structure. A good governance structure is designed to ensure risk coverage as well as the adaptation of their processes and controls to regulatory requirements. We are happy to advise you in IT compliance. Effects of a lack of governance structure Impacts of a structurally-free compliance governance can be the following: The corporate architecture becomes sluggish. Reactions to...
-
Deadly Sin 5: There Is No Understanding of Regulation
In IT-related issues such as data protection, confusion may arise in the absence of a regulatory understanding within the company. This is due to our experience that understanding a company for a legal point of view often does not coincide with the intention of a regulation. Understanding The result is that companies don't know what regulators want from them. Companies should...
-
Deadly Sin 6: Compliance dictates IT Security
Managers in the field of IT security depend on them to be always up-to-date with the legal requirements for compliance. However, you must not lose sight of a stable safety program. A good data flow, a thriving company that remains competitive – that succeeds with the right attitude. Lawyer Dipl.-Ing. Michael Horak, LL.M. Security program...
-
Death sin 7: rejecting key technologies
The market offers a wealth of technologies for compliance requirements. Legal and compliance departments are responsible for the procurement of these technologies. IT managers can, however, participate in the selection and use of optimal solutions. Use a first IT compliance consultation. Essential Technology Areas The essential three technology areas in which compliance managers should invest are: 1. Basic Systems of Record...