Information Security & Data Protection
The secure processing of information is a key prerequisite for the stability of modern organizations. Companies and public authorities face increasing requirements with regard to IT security, data protection, and regulatory compliance.
TÜV Saarland Consulting GmbH supports organizations in the analysis, design, and further development of appropriate management and organizational structures in the following areas:
- Development and implementation of Information Security Management Systems (ISMS)
- Structuring information security processes in the automotive sector (TISAX requirements)
- Implementation of data protection requirements in accordance with the GDPR and the German Federal Data Protection Act (BDSG)
- Analysis and implementation of regulatory requirements in the context of NIS2 and DORA
- Assessment of organizational and technical requirements in accordance with DIN EN 50600
Our services include in particular:
- Current state analyses and gap assessments
- Risk analyses and action planning
- Development and structuring of documentation systems
- Training and awareness programs for executives and employees
- Project support during organizational implementation
Disclaimer: Maintaining neutrality, objectivity, independence and impartiality is a fundamental principle for the TÜV Saarland Group. All audit and certification activities are carried out in strict compliance with the relevant accreditation requirements. TÜV Saarland Certification GmbH does not provide any consulting services in the field of management systems and is not involved in any way in the performance of such activities. In order to avoid actual or potential conflicts of interest and to ensure impartiality in the long term, it is ensured that persons who have been involved in consulting services may not be assigned to audit or certification procedures for the same management system at the same customer until at least two years have elapsed. Irrespective of this, we ensure at an organisational level, through institutionally anchored separation mechanisms, transparent decision-making processes and independent reviews, that all certification decisions are made free from undue influence.