Information Security
In Finance
Dr. Christian Schwartz
Managing Consultant
One of the central objectives of BaFin’s regulatory requirements is to ensure effective risk management. Satisfying the increasing number of requirements means more personnel expenditure and organizational and technological effort. We work with our clients to develop cyber security strategies, define long-term goals and guide harmonization with new financial regulatory requirements."
3 Lines-of-Defense Model
The 3 lines-of-defense modelhas established itself as a means to identify and manage risks. We specialize in consulting and support services relating to the 1st and 2nd Lines of Defense.
European Requirements
In an interconnected Europe, where international cooperation between financial companies is widespread and digitization-related risks have potential cross-border implications, DORA now aims to fill this gap and provide a complementary common legal framework at EU level.
DORA
Digital Operational Resilience Act
BaFin Requirements
The topic of IT is a key focus in supervisory special audits. The aim of this approach is to increase IT security in the market and raise the IT risk awareness among the companies affected.
The requirements of the German Federal Financial Supervisory Authority (BaFin) contain an adaptive and practice-oriented framework for the technical and organizational design of IT. With a focus on the management of IT resources and on IT risk management, they entail not inconsiderable adjustments to the internal organizational structure.
BAIT
Supervisory Requirements for IT in Financial Institutions
KAIT
Supervisory Requirements for IT in German Asset Managers
ZAIT
Supervisory Requirements for IT in Payment and E-Money Institutions
VAIT
Supervisory Requirements for IT in Insurance Undertakings
"For a successful harmonization project, it is important for institutions to choose the right partner for implementation. We combine the required expert knowledge in information security with extensive experience in regulatory projects in the banking environment. We look forward to assisting you with our expertise."
Kerstin Ritter
Senior Consultant
Project Support for Information Security in Finance
The impact a new project will have on information security in finance must be considered as early as possible.
Ensuring information security while selecting, prioritizing and planning projects
Project management with a special focus on information security
Working on concrete work packages that are part of the project