Header Animation Graphic
Moderne Architektur in Hamburg: Ein gläsernes Bürogebäude umgeben von städtischer Landschaft und Aussicht auf den Hafen.
ISO-certified
20 years of experience
In-person consultations throughout Germany

Information Security for Your Business

  • Certified Experts in ISMS and ISO 27001
  • Customized Solutions for Every Industry
  • Practical advice with lasting results

Trusted by 1000+ Customers

  • Berlin Power Grid
  • ShiftJuggler
  • SHARP
  • Joachim Herz Foundation
  • Flensburg: Between Heaven and the Fjord
  • German Red Cross (DRK) Schleswig-Holstein
  • DPS
  • Celonis

Information Security at intersoft consulting services

Information security touches on numerous areas simultaneously. An effective information security management system (ISMS) is essential today. We ensure its efficient implementation—from technical safeguards and regulatory compliance to organizational integration within the company.

intersoft consulting services covers all of these areas: Our information security consulting services range from ISMS implementation to certification preparation, internal audits, ISMS risk management and awareness campaigns, as well as consulting based on industry-specific standards. The overlap with our consulting areas of data protection and IT forensics enables a holistic consulting approach.

See for yourself the benefits of working with us.

  • Certified Information Security Professionals
  • A wealth of experience
  • Custom Solutions

Our Services for Your Information Security

We support you in all aspects of information security—from the initial assessment to successful certification.

ISMS and Certification

We’ll guide you through the structured implementation of your ISMS and help you prepare specifically for certification.

NIS-2

We provide comprehensive support to help you achieve NIS 2 compliance.

External ISB and CISO

Our certified experts take on the role of Information Security Officer or CISO and integrate seamlessly into your organization.

More

From analysis to knowledge transfer to expert consulting—we support you at every level of information security.

Who is information security relevant to?

Information security is not limited to specific industries or company sizes. As soon as business-critical information is processed—whether customer data, contracts, development documents, or financial data—systematic protection is essential. Regulations such as NIS-2 and DORA require companies to implement verifiable security measures, and an increasing number of business partners now require a certified ISMS in accordance with ISO 27001 or TISAX.

intersoft consulting services helps you identify the requirements relevant to your business and establish an ISMS that not only meets regulatory requirements but also strengthens the trust of your business partners. We offer all of this in a practical manner, regardless of your industry.

In einem Meeting teilt ein Consultant sein Wissen zur Informationssicherheit mit seinen Kolleginnen und Kollegen

Our expertise protects your data – intersoft consulting services

As an experienced specialist, intersoft consulting services has been combining information security and data protection for over two decades. This synergy makes our consulting services particularly effective—because security concepts are only effective when they also take regulatory and organizational requirements into account.

  • Information Security and Data Protection from a Single Source
  • All common standards and industries covered
  • Verifiable Results Through Independent Certification
  • Field-tested document templates included

Our Locations Near You

Personalized advice is important to us. We are here for you throughout Germany and are always available to assist you.

What Sets Us Apart

Eine Beraterin präsentiert in einem Konferenzraum vor fünf Zuhörern, Grafiken auf einem Bildschirm sichtbar.

Long-term partnership

Long-term, personalized consulting for all information security issues: Together, we develop solutions that are understood and supported from the very beginning.

Diagramm mit Fokus auf Datenschutz, IT-Forensik und Informationssicherheit, ergänzt durch Bewertungen und Unterstützungshinweise.

Comprehensive ISMS Consulting

From setup and operation to auditing and continuous improvement: We provide you with advice based on best practices and economically sound recommendations.

Eine Gruppe von sechs Personen diskutiert an einem Tisch über einen Laptop in einem modernen Büro.

Many years of experience

Our consultants have extensive experience gained from numerous ISMS projects. We provide you with reliable support across all industries and in line with the latest standards.

Ralf Lüneburg, Consultant für Informationssicherheit bei intersoft consulting services AG

Ralf Lüneburg

Information Security Consultant

I’d be happy to advise you

Give us a call or send us a message using the contact form.

Information Security According to Industry Requirements

Every industry has its own regulatory requirements. We understand the specifics and provide you with tailored advice:

KRITIS – ISMS and B3S

Under the BSI Act, operators of critical infrastructure are required to secure their information technology systems in accordance with the state of the art. This generally involves establishing an ISMS based on recognized standards or—where available—industry-specific security standards (B3S). Operators must demonstrate compliance with these requirements to the BSI at specified intervals through certification by independent, qualified bodies.

Energy Supply – ISMS in Accordance with the IT Security Catalog

Under the Energy Industry Act (EnWG), operators of electricity and gas grids as well as critical energy facilities are subject to specific requirements regarding IT security and incident reporting. They must operate an ISMS based on ISO 27001 and supplement it in accordance with the Federal Network Agency’s IT security catalogs for networks and facilities, which are based on ISO 27019 and other industry-specific requirements. Implementation is audited by certification bodies accredited by DAkkS.

Automotive – ISMS for Automotive Suppliers

In the automotive industry, the secure exchange of information between manufacturers and suppliers is crucial. Based on the ISA questionnaire developed by the VDA, the TISAX assessment evaluates information security throughout the supply chain. The audit is conducted by TISAX audit service providers accredited by the ENX Association.

Financial and Insurance Companies: ISMS and DORA

Under DORA, financial and insurance companies are subject to strict requirements regarding the management of ICT risks and the protection of sensitive, often personal, data. A structured information security management system helps them effectively implement these requirements and provide verifiable evidence of compliance to BaFin.

Other Industries – ISMS for Reliable Business Relationships

Whether you’re a software developer, an IT service provider, or a manufacturing company, business partners increasingly expect a verifiable security standard. ISO 27001 provides a flexible ISMS framework that can be scaled from a single-entity business to an international corporation.

What is an Information Security Management System (ISMS)?

Ein kreisförmiges Diagramm mit vier Phasen: Plan, Do, Check, Act, in verschiedenen Farben angeordnet.

An Information Security Management System (ISMS) serves as the organizational backbone for the systematic protection of information. It defines policies, processes, and responsibilities for identifying, assessing, and appropriately addressing risks. ISO 27001 provides the internationally recognized framework for this. For many companies, this has long been a prerequisite for business relationships.

Your Path to ISMS with intersoft consulting services:

  • Assessment and Risk Analysis
  • Selecting the appropriate standard (ISO 27001, IT‑Grundschutz, TISAX, etc.)
  • Structured ISMS Implementation Through Certification
  • Continuous Improvement and Operations

What Our Customers Say

Testimonials from people who have already gotten to know and appreciate us.

  • Our ongoing collaboration with intersoft consulting services has proven to be very helpful in continuously optimizing the quality and security of our IT services.

    rating-star rating-star rating-star rating-star rating-star

    Dr. A. Preuß, Managing Director

    cut-e

  • In the Business Continuity Management project, intersoft consulting services supported us with their professional expertise and experience. Looking back, we have improved security within the WestSpiel Group.

    rating-star rating-star rating-star rating-star rating-star

    V. Ring, IT Department

    Westdeutsche Spielbanken

  • The workshop-based approach and highly competent support provided by intersoft consulting services enabled us to gradually build our ISMS largely on our own, in accordance with the IT Security Catalog. Complemented by an internal audit in accordance with ISO 27001, we can ultimately demonstrate that our ISMS was certified on schedule, without any nonconformities or additional requirements. The certifying body specifically praised the quality.

    Read more
    rating-star rating-star rating-star rating-star rating-star

    Erwin Mees, ISMS Project Manager and IT Security Officer

    KEW Kommunale Energie- und Wasserversorgungs AG

  • Through constructive collaboration, we can both meet legal requirements and continuously improve the security of our IT systems. This allows us, as an employer, to continue to permit the personal use of company communication tools, for example.

    rating-star rating-star rating-star rating-star rating-star

    D. Halfmann, Deputy Human Resources Manager

    Dohle Handelsgruppe

The Information Security Process

Our structured consulting approach guides you through five sequential workshops, from the initial orientation to a fully functional risk management system.

Eine Gruppe von sechs Personen in einem modernen Konferenzraum, während eine Frau eine Präsentation hält.

ISMS Intensive Training

To begin with, we ensure that all project participants have a solid understanding of the chosen standard—whether it’s ISO 27001, IT‑Grundschutz, or an industry-specific set of guidelines. In doing so, we work together to clarify which requirements are relevant to your company and what key terms such as “scope” or “interested parties” actually mean.

Eine Gruppe von Geschäftsleuten in einem Konferenzraum, die an einem Meeting teilnehmen, mit einem Moderator am Tisch.

GAP Analysis and Planning

In the second step, we assess the current state of your information security and identify existing gaps relative to regulatory requirements. Based on this, we develop a concrete action plan with clearly defined work packages and responsibilities.

Eine Gruppe von fünf Personen sitzt in einem modernen Raum, arbeitet an Laptops und Smartphones.

Structure of the ISMS Documentation

You’ll receive our tried-and-true template package containing all the documents required by ISO 27001. Since 70 to 80% of the content is already pre-structured, you can jump right into editing the content. Our experts will explain the structure and use of each template.

Ein Geschäftstreffen in einem modernen Konferenzraum mit mehreren Personen, die an einem Tisch diskutieren.

Structure of the ISMS Core Processes

We will then establish the core control processes of your ISMS and integrate them with your existing documentation. This includes all recurring tasks, such as audit planning, the continuous improvement process, and management reporting.

Ein Vortragender steht vor einem Publikum in einem modernen Konferenzraum mit Pflanzen und einem Präsentationsbildschirm.

Establishing an Appropriate ISMS Risk Management Framework

Finally, we will work with you to develop a risk management system that builds on your existing processes. This involves identifying corporate assets, analyzing hazards, and assessing and addressing risks according to defined criteria.

Ralf Lüneburg, Consultant für Informationssicherheit bei intersoft consulting services AG

Ralf Lüneburg

Information Security Consultant

I’d be happy to advise you

Give us a call or send us a message using the contact form.

Your Information Security Consultants at intersoft consulting services

Certified expertise with a personalized approach—right here for you

Information security requires a broad range of expertise. Our team includes BSI-certified ISO 27001 audit team leaders based on IT‑Grundschutz, ISO 27001 lead auditors and implementers, and TÜV-certified IT security officers. This expertise is complemented by DORA ICT risk managers, business continuity managers, and specialists in cloud information security in accordance with ISO 27017/27018.

For you, this means: Whether you’re dealing with the strategic direction of your ISMS, technical vulnerability analyses, or preparing for a certification audit—at intersoft consulting services, you’ll find the right expertise. Your personal contact person coordinates the collaboration and has a detailed understanding of your situation.

Thanks to their independence and neutrality, our external consultants can objectively evaluate all security-related aspects without being influenced by internal conflicts of interest.

Practical experience is a key factor for success in consulting. Over the years, we have gained both theoretical knowledge and practical experience across a wide range of industries and company sizes. Thanks to this practical experience, we are able to identify solutions that are both legally compliant and practical.

Recognized Through Certificates & Memberships

After years of work in the field of information security, we have earned a wide range of Certificates and memberships.

Cybersecurity Network (CSN)
Cybersecurity Network (CSN)
ISO 27001 Certified
ISO 27001 CertifiedOpen certificate
Cybersecurity Practitioner
Cybersecurity Practitioner
ISO 27001 Audit Team Leader Based on IT-Grundschutz
ISO 27001 Audit Team Leader Based on IT‑Grundschutz
Competence Center for Applied Security Technology e.V. (CAST)
Competence Center for Applied Security Technology e.V. (CAST)
Certified Information Systems Auditor (CISA)
Certified Information Systems Auditor (CISA)
Alliance for Cybersecurity
Alliance for Cybersecurity
ISO 27701 Certified
ISO 27701 CertifiedOpen certificate
Ralf Lüneburg, Consultant für Informationssicherheit bei intersoft consulting services AG

Ralf Lüneburg

Information Security Consultant

Free Initial Consultation

We’re happy to answer your questions. Please feel free to contact us using our contact form.

Frequently Asked Questions About Information Security

Does my company need an ISMS?

An ISMS is required by law for KRITIS operators, financial institutions subject to DORA, and companies within the scope of the NIS 2 Directive. But even without a regulatory requirement, companies stand to benefit: intersoft consulting services supports you in establishing an ISMS that systematically reduces cyber risks and builds trust with business partners.

How long does it take to implement an ISMS?

Based on our experience, implementing an ISMS—including preparation for certification—takes between six and twelve months. intersoft consulting services uses a workshop-based approach and proven document templates to make the process as efficient as possible for you.

How much does ISO 27001 certification cost?

The investment consists of consulting services for setting up the ISMS and the fees charged by the certification body. Key cost factors include company size, locations, and the maturity level of existing measures. intersoft consulting services will provide you with a customized quote based on an initial assessment.

What does an external information security officer do?

The ISB coordinates all information security measures: from security policies and risk analyses to employee awareness training. The external ISBs at intersoft consulting services are ready to go immediately, operate independently, and bring experience from a wide range of industries.