Pharma-Quality for Your IT Security.
Pragmatic. At a Fixed Price.
I check your IT security with the same rigor that applies in the pharmaceutical industry for patient safety - and I deliver you the proof required by the BSI. No technobabble. Clear results.
NIS2UmSatzG has been in effect since March 6, 2026.
All obligations are legally binding immediately.
Free NIS2 Self-Check
No login required. No data storage. All entries remain in your browser. At the end, you will receive a detailed report with prioritized action recommendations.
When You Need to Act Now
Do you recognize any of these signs?
If you recognize even one of these signs, the risk is real – and so is the liability.
Are You Affected?
If even one question can be answered with YES, action is required. Starting in 2026, management will be personally liable.
Company Size
More than 50 employees or over €10 million in revenue?
Critical Sector
Energy, health, transport, logistics, chemicals, food and beverage?
Supply Chain
Do you supply KRITIS companies or are part of a critical supply chain?
IT Status
Last risk analysis older than 12 months? No documented ISMS?
The CZECURE Standard
No more hoping for the best.
My methodology comes from pharmaceutical quality assurance (GAMP 5, Computer System Validation). In clinical research, IT systems must demonstrably function correctly – not just documented, but validated. I bring exactly this approach to your NIS2 compliance.
Risk Clarity
I specifically identify the gap that endangers your operations and BSI compliance today – prioritized, not generic.
Liability Protection
I make you NIS2 compliant and strengthen your position as a managing director facing BSI and regulatory authorities.
Audit-Readiness
I actually test whether your systems, documentation, and processes can withstand a BSI audit – not theoretically.
Expertise
Why you should not trust an ordinary IT consultant.
IT consultants manage technology. I manage your security facing authorities, auditors – and in the worst case – insolvency administrators.
Jan Richter
IT Security Consultant & NIS2 Compliance Expert
With over 10 years of experience in the highly regulated pharmaceutical industry and direct responsibility towards international regulatory authorities like the FDA and EMA, I know first-hand: when IT fails, the excuse doesn't count – the protocol does. I was the one who had to answer to authorities. I bring this uncompromising perspective into your company.
IT Budgets Managed
I know the entire lifecycle of an IT budget and immediately recognize flawed planning.
Globally Negotiated with Vendors
I uncover hidden costs that never appear on the datasheet.
IT Audits Passed
I know the structural risks that dashboards and vendors overlook.
13+ Countries Coordinated
Former IT Lead at internationally active CRO – FDA, EMA, BSI are nothing new.
Transparent Fixed Prices
No hidden costs. No hourly rate roulette. Clear value from day one.
NIS2 Eligibility Check
Are you affected by the directive? Find out for free.
NIS2 Audit (4900 EUR)
GAP Analysis & BSI Readiness combined. The foundation for your compliance decisions.
Full Mandate Implementation
Complete NIS2 compliance from start to finish.
Frequently Asked Questions
Socio-technological validation means we don't just check technical systems, but also the human processes and governance structures that govern them. This ensures your entire operational ecosystem remains in a validated state.
While ISO 27001 and NIST provide frameworks for security policies, our approach focuses on validating actual execution. We don't just check if policies exist, but whether they actually function correctly.
No, we don't provide ongoing security operations. Our focus is on validating and assessing your existing security infrastructure. We empower your team to implement the recommended measures themselves.
Our validation process begins with a comprehensive analysis of your current IT environment, including technical infrastructure and human processes. Based on this analysis, we create a detailed report with concrete action recommendations to improve your IT security.
We primarily work with medium and large-sized companies in Europe, particularly in sectors such as financial services, healthcare, energy, and public administration. Our expertise is however applicable across industries.
Duration varies depending on the scope and complexity of your IT infrastructure. A typical project can take between 2 and 6 weeks. We work efficiently and adapt to your timeline.
Get in Touch
Have questions about NIS2 compliance or AI security? We'd love to hear from you.