Regulatory requirements and laws create special challenges for large international companies as well as for small and medium-sized companies. The requirements set by the Federal Data Protection Act (FDPA/BDSG) and the General Data Protection Regulation (GDPR) affect almost every company in Germany. In addition, there are industry-specific requirements that must be considered. In the case of financial services providers, these are the Sarbanes-Oxley Act (SOx), the Minimum Requirements for Risk Management (MaRisk) and, naturally, for KRITIS companies the IT Security Act (ITSiG or BSIG).

esatus AG helps you to meet the regulatory requirements of IT compliance, especially by implementing management systems (e.g., information security management systems according to ISO 27001, business continuity management systems according to ISO 22301 or compliance management systems according to ISO 19600). Generally, different management systems are combined in order to benefit from synergy effects. Thus, we can avoid double documentation and additional risk assessment efforts. We also support you in all data protection issues by preparing mandatory documentation or by appointing an external data protection officer. In all GRC projects, we take a risk-based approach for our measures, as risk management is a central component for all issues.