Seamless IT security and regulatory compliance for sophisticated defence systems
Information security is of paramount importance in defence projects. Specific regulations and frameworks must be complied with, which requires the deployment of experienced and competent personnel to avoid delays and additional costs.
With our Security Readiness service, we provide information security consultancy throughout the entire system lifecycle of defence projects – from the initial requirements right through to certification. We support our clients in all phases of system development for the relevant product and ensure that IT security and information security aspects are integrated from the outset.
Our portfolio
High-performance solutions for complex security requirements
Security Engineering
Security by Design begins even before the project starts, with the conceptualisation and derivation of IT security-related requirements, as well as the creation of security-oriented system architectures and designs, including requirements engineering.
Security Concept
Preparation of the necessary client-specific information security documentation in accordance with the relevant standard, for example BSI IT-Grundschutz, including the specific regulations for NATO or the Bundeswehr.
Security Hardening
Selection, explanation and implementation of the specific configuration and hardening requirements of the Bundeswehr, NATO, etc., in order to provide systems with optimum protection against potential cyber threats and unauthorised access.
Security Implementation and Integration Support
Migration and tailored implementation of IT security requirements within the existing system landscape, as well as the seamless integration of all essential security functionalities. This ensures that all security objectives are seamlessly incorporated into the implementation process from the outset.
Security Verification and Validation
- Creation and execution of test cases to validate IT security requirements
- Documentation of the verification process, for example in a proof of implementation.
- Penetration testing to assess the security of the relevant product.
Security Accreditation
Support with accreditation and authorisation procedures in close collaboration with the BSI and the German Military Security Accreditation Authority (DEUmilSAA). This includes the structured preparation, compilation and management of all necessary documentation to ensure smooth certification and official authorisation for operational use.
Your benefits
Military experience meets in-depth IT security expertise
Our consultants combine in-depth specialist knowledge in the field of information and IT security with a practical understanding of military operations, gained through their active service in the Bundeswehr. This combination of technical expertise and operational know-how enables us to provide pragmatic, solution-oriented consultancy that delivers genuine added value.
We consistently implement the BSI IT-Grundschutz requirements mandated in German and international defence projects. By incorporating Bundeswehr-specific components and relevant NATO standards, we cover the entire range of services: from security engineering and security hardening through to final security accreditation.
The preparation of the necessary information security documentation is carried out in phases and based on well-established methods. We have extensive experience in working with the Grundschutz Compendium and the Grundschutz catalogues, as well as in using the SAVe tool for systematic security assessment and documentation. Furthermore, we can draw on a strong network of expertise within the msg Group. Our range of services extends from strategic planning and technical implementation through penetration testing to red team attack simulations. We also cover the operation of a Security Operations Centre (SOC) using SIEM tools, as well as the provision of a Computer Security Incident Response Team (CSIRT). In this way, we guarantee you comprehensive IT security from a single source.
With our expertise, we ensure that your systems meet the defence sector’s high security requirements in an efficient, traceable and auditable manner.
Use cases for end-to-end IT security
Military Information Security Concepts
From the BSI’s IT-Grundschutz to bespoke security concepts for self-sufficient units in combat conditions: discover, through specific case studies, how modern information security is seamlessly implemented in defence-related environments. We demonstrate how operational capability, strict confidentiality levels and real-time requirements are balanced in a practical manner.
When can we advise you?
Whether it’s creating security documentation in the SAVe tool, conducting penetration testing or providing support with official approval from the BSI and DEUmilSAA: make the most of our combination of in-depth IT security expertise and hands-on experience within the Bundeswehr for your defence project.
