Kai Wittenburg

• German BSI IT Baseline Protection: Audits
• BSI IT-Grundschutz: Beratung und Consulting
• German BSI IT-Baseline Protection: Structuring an ISMS
• German BSI Standard 200-2: Creation of IT Security Concepts
• German BSI Standard 200-3: Risk Analysis and Risk Management
• German BSI Standard 200-4: Emergency Management and Planning
• Data Protection: Audits
• Data protection management according to GDPR and German BDSG (2018)
• Data protection management according to GDPR and LDSG (2018)
• Incident Management
• ISO 27001: Structuring an ISMS
• ISO 27001: Audits
• ISO 27001: Consulting
• ISO 27004: Information Security Controlling / Security KPI (ISO 27004)
• ISO 27005: Risk Analysis and Risk Management
• Penetration Tests / Blackout Practice
• Vulnerability Analysis / Vulnerability Scans with Greenbone/OpenVAS
• Workshops, Training, Coaching
• Sensibility and Awareness
• verinice: Installation and Setup
• verinice: Implementing an ISMS
• verinice: Customizing (Data Model, GUI, Reports)
• verinice: GSTOOL-Migration mit Datenübernahme nach verinice
• verinice: Workshops

• CISA - Certified Information Systems Auditor

• Automotive
• Banking
• Energy Supply
• Financial Services
• Free Welfare
• Healthcare
• Trading
• Industry Sector
• IT-Services
• Logistics
• Aerospace Industry
• Machinery and Plant Engineering
• Media and Publishing
• Fashion and Design
• Public Administration
• Manufacturing
• Data Center
• Software- and Hardware Vendors
• Technology Companies
• Telecommunications companies
• Insurance
• Utilities and Waste Management Companies
• Trade Associations
• Other Service Providers

About neam

neam is an owner-managed, medium-sized IT consulting company with currently more than 80 certified, highly qualified employees in Paderborn and Berlin. In the business area of information security we advise our customers holistically on all topics concerning information security management systems (ISMS) according to the standards ISO 27001 or BSI IT-Grundschutz as well as on emergency management.

We take care of the sensitization of employees and, if desired, lead our customers to certification. Our penetration testers and auditors check the current security level, identify and evaluate risks and provide recommendations for action.