Our approach

Security is a process, not a product

Most security incidents do not begin with a sophisticated attack, but with an unpatched system, compromised credentials or a convincing phishing email. Effective protection therefore requires more than technology: clear responsibility at management level, defined processes, continuous monitoring and informed employees.

NETHEON covers all of these from one team. As CISO as a Service, we take on the strategic responsibility for information security. Our security operations centre monitors your systems around the clock, and we operate your UTM firewalls as a managed service. Our consultants assess risks, prepare you for audits and regulation and help you meet the requirements of ISO 27001, the German BSI, the GDPR and the EU NIS2 directive.

Scope of services

Leadership, protection, monitoring

01
CISO as a Service

An experienced Chief Information Security Officer on demand: security strategy, policies, risk management and reporting to management, without a permanent senior hire.
02
SOC services

Our security operations centre monitors your systems 24/7, analyses alerts, investigates incidents and initiates the response in coordination with your team.
03
Managed UTM firewall

Unified threat management firewalls such as R&S LANCOM Unified Firewalls, operated by us: configuration, updates, rule management, monitoring and regular reviews.
04
Security consulting

Audits, risk assessments, security policies and continuity planning, with findings prioritised by risk and a clear roadmap. Including GDPR, PCI DSS and NIS2 readiness.
05
Penetration testing

Black-box, white-box and social-engineering tests that demonstrate where and how an attacker could gain access – with specific recommendations.
06
Security awareness

Practical training that enables employees to recognise phishing and social engineering and to handle sensitive data responsibly.

How we work

Our security methodology

Every engagement begins with a clear picture of the current risk and a defined responsibility.

01
Assess

Audits, interviews and, where appropriate, penetration tests establish the current security posture.
02
Plan

Together with our CISO we prioritise measures by impact and effort and define responsibilities and a roadmap.
03
Protect

Firewalls, endpoint protection, policies and training are implemented, documented and operated.
04
Monitor and respond

Our SOC monitors your environment around the clock and responds to incidents; regular reports keep management informed.

Frequently asked questions

What does CISO as a Service mean in practice?

An experienced NETHEON security officer takes on the role of your CISO for an agreed number of days: developing the security strategy and policies, managing risks, preparing audits and reporting to management. You gain senior expertise without a permanent hire, and continuity when people change.

What does NIS2 mean for our organisation?

The EU NIS2 directive extends cybersecurity obligations to many additional sectors and companies, including management accountability and incident reporting duties. We assess whether and how it applies to you, which measures are required and support their implementation.

What is included in a managed UTM firewall?

We plan, configure and operate your firewalls: security updates, rule changes, VPN access, monitoring of the firewall and its alerts and regular reviews of the rule base. Changes are documented and agreed with you.

Can you take over security operations entirely?

Yes. With CISO as a Service, SOC services and managed firewalls we cover strategy, protection and monitoring – in coordination with your internal IT team where one exists.