As the internal IT service provider of Pfeifer & Langen Industrie- und Handels-KG, a leading manufacturer in the food and luxury food industry, one of the challenges the team faces is ensuring the compliance of decentralized systems. The company uses LocateRisk to continuously identify and evaluate its external attack surface. This supports the daily defense and audits.<\/strong><\/p>\n\n\n The networking of IT and OT as well as growing infrastructures are increasing the complexity of the IT landscape. At the same time, decentralized system implementations and service provider connections are making complete transparency of the digital footprint ever more demanding. J\u00f6rg Marczinek, IT Governance Manager at Pfeifer & Langen IT-Solutions KG, faced precisely this challenge.\u00a0<\/span>\u201eDue to the networking and expansion, we have many more external service providers that we have to coordinate,\u201c explains J\u00f6rg Marczinek. <\/span>Specialist departments commission agencies, register domains or set up servers in order to remain agile. <\/span>However, these systems are not always recorded in the central IT administration. \u201eThere is already a server somewhere that is not secure, but over which we have no control,\u201c says J\u00f6rg Marczinek, describing the challenge. <\/span><\/p>\n\n\n Before LocateRisk was used, there was no structured overview of the external IT attack surface. Sporadic orders from IT service providers only provided snapshots. The idea to commission LocateRisk came at an IT event in D\u00fcsseldorf, when the then still young start-up presented itself professionally and competently. <\/p>\n\n\n\n The primary goal was transparency. \u201eIt was about establishing a systematic approach and gaining an overview of which servers and domains are susceptible to attacks and highlighting security gaps,\u201c says J\u00f6rg Marczinek. The first scans also revealed systems that were assigned to the company by name but were not under its direct control; an important step towards clarifying responsibilities and cleaning up the assets.<\/p>\n\n\n\n \u201eWe can present the report to inspectors and auditors and prove that we carry out regular risk analyses for the external IT infrastructure.\u201c<\/strong> \u2014 <\/span><\/span>J\u00f6rg Marczinek, IT Governance Manager at Pfeifer & Langen IT-Solutions KG<\/span><\/span><\/p>\n\n\n\n Today, quarterly analysis is an integral part of IT security. The solution is particularly helpful when communicating with inspectors and auditors. \u201eWe can present the report to inspectors and auditors and prove that we carry out regular risk analyses for the external IT infrastructure,\u201c explains J\u00f6rg Marczinek. This creates trust and speeds up the processing of inquiries. Although the scans do not replace the complete internal documentation, they do provide the necessary data points to objectively substantiate the current security status.<\/p>\n\n\n\nFrom sporadic checks to a continuous overview<\/strong><\/strong><\/h3>\n\n\n\n
Support with audits and insurance issues<\/strong><\/strong><\/strong><\/h3>\n\n\n\n
Compliance risks at a glance: NIS-2 and GDPR<\/strong><\/strong><\/strong><\/h3>\n\n\n\n