Inspection
IT and security analyses (on-site & document reviews, not certifications)
Our IT and security visual inspections serve to independently determine the visible condition of IT-relevant areas, as well as to objectively review selected documents and evidence in the context of technical and organizational security measures.
Important note
Our inspections do not constitute certification, a governmental inspection, or a legally binding conformity assessment. They serve as a neutral determination of the actual status, without functional testing, without intervention in products or facilities, and without any advisory character.
Our inspection services are not accredited. Nevertheless, in planning, execution, and reporting, we strictly follow the requirements of DIN ISO 17020 as well as other relevant standards.
No ISO/IEC 27001 certifications are performed, and no legally binding statements regarding compliance with the GDPR or NIS2 are made.
Overview
What is it about?
The activities include purely descriptive assessments of the current state of existing structures, processes, and documentation, without evaluating any management system and without providing consulting elements.
In the context of AI-related IT and security analyses, established frameworks such as the NIST AI Risk Management Framework (AI RMF) may additionally be used as references, particularly for the structured assessment of risks, robustness, and security aspects of AI systems within the context of existing IT and information security structures.
What's included
- Visual inspection of the IT infrastructure for identifiable security-relevant irregularities (e.g., access paths, device condition, labeling)
- Document-based review for the existence and completeness of selected security documents (e.g., policies, inventory lists, logs)
- Verification of visible organizational IT security measures (e.g., clean-desk requirements, on-site access controls)
- Examination of labels, role or permission lists for structural plausibility (without system analysis)
- Determination of whether certain security-relevant requirements are traceably addressed in documents (without effectiveness assessment)
Your request
What would IT and security analyses (on-site & document reviews, not certifications) cost for you?
Simply request a non-binding quote, quickly and directly.