TÜV NORD GROUP launches new initiative to strengthen cyber security for SMEs

In an increasingly digitalised world, small and medium-sized enterprises (SMEs) are faced with the challenge of protecting themselves against the growing threats of cybercrime. In order to meet these requirements, the Federal Office for Information Security (BSI) and Der Mittelstand, BVMW e.V. have developed the CyberRisikoCheck - an innovative tool for assessing a company's current IT security situation. TÜVIT, a subsidiary of the TÜV NORD GROUP, is listed with the BSI as a qualified IT service provider for carrying out the CyberRisikoCheck with companies.

The CyberRiskCheck at TÜVIT offers an efficient method for analysing the information security status and identifying potential threats. It serves as a first step towards improving information security, with the responsibility for implementation lying with the company. Samantha Murmann, Product Manager Data Protection & E-Health at TÜVIT, emphasises: "Early detection of security risks is crucial in order to identify vulnerabilities before they are exploited by cyber criminals."
The advantages of the CyberRiskCheck at TÜVIT are manifold. It enables a cost-effective initial analysis without immediate expensive security solutions and offers customised recommendations for specific, practical measures to improve security. It also highlights funding opportunities through government programmes that support security measures.
The CyberRiskCheck process includes an initial briefing on the exact procedure. Based on the catalogue of requirements (DIN SPEC 27076), the current cyber security status of the respective company is then determined. This is done in an interview lasting one to three hours. TÜVIT analyses the information and identifies the risk. The experts then summarise the results in a report and an explanatory presentation. According to Murmann, this information enables companies to understand the cyber security of their systems and determine what measures they need to take to eliminate any potential attack surfaces.
If the CyberRiskCheck identifies vulnerabilities, TÜVIT can provide support on request with additional services such as checking compliance with statutory data protection requirements through a data protection GAP analysis or penetration tests of the systems.