ITSB Group
Security.Trust.Progress.
Cybersecurity, compliance and digital solutions for businesses shaping a secure future.
- Consulting and software from one source
- Based in Munich, focused on the mid-market
- Hosted in German data centres
About ITSB
One brand for information security, compliance and digital solutions.
ITSB Group brings our work together around a single question: how does information security become manageable for a business – not as a project that eventually ends, but as part of how the company is run?
That takes two things which rarely come together. Consulting that accepts responsibility instead of leaving recommendations behind. And software that makes this responsibility demonstrable. Our platform grows out of consulting practice; our consulting becomes more reliable because of the platform.
We measure ourselves not by the number of controls implemented, but by their effect: understandable for the management, defensible in an audit, dependable when something actually happens.
Areas of expertise
Security you can govern, review and prove.
Our capabilities are designed to reinforce one another – from the first assessment to continuing accountability in day-to-day operations.
Cybersecurity & managed security
Identify weaknesses, monitor systems, prioritise risk. Continuous operation rather than a single snapshot in time.
Information security & ISMS
Building and maintaining a management system to ISO 27001 – from gap analysis through to certification readiness.
Governance, risk & compliance
Risk management, policies, supplier governance and business continuity treated as one connected system.
Data protection & GDPR
External data protection officer, records of processing, technical and organisational measures, retention and deletion concepts.
Managed CISO (vCISO)
The information security officer role – scalable from a baseline function to full CISO accountability.
Audits, assessments & awareness
Internal audits, audit simulations, gap analyses against ISO 27001, NIS2 and TISAX, plus awareness programmes for employees.
Software solutions
ITSB-OS: security status, measures and evidence in one place.
Compliance rarely fails for lack of intent. It fails for lack of overview. ITSB-OS makes an organisation’s security and compliance status visible, derives concrete measures from it, and keeps the evidence ready for the moment auditors, insurers or customers ask for it.
The platform is built for companies without a dedicated compliance team – and for IT service providers and consultants managing several client mandates in a structured way.
Security cockpit
Security status, open measures, critical findings and priorities on a single screen.
Self-assessment
A structured questionnaire that positions the organisation against NIS2 or ISO 27001.
Vulnerability scan
Checks mail servers, web servers, open ports and certificates – without touching your systems.
Measures & evidence
Every measure with an owner and a deadline; reports and evidence exportable at the push of a button.
Business units
Two units, one standard.
At ITSB, consulting and software are not separate businesses. They are two sides of the same task.
ITSB Deutschland
Consulting and managed services for cybersecurity, information security, data protection and compliance – from the external data protection officer to a full vCISO function.
ITSB-OS
The software platform for security and compliance management: self-assessment, vulnerability scanning, measure tracking and evidence export – also licensed for consultants managing multiple clients.
Partnerships
Collaboration that holds up on both sides.
For many IT providers, consultancies and law firms, security and compliance are an obvious adjacent topic – but rarely their core business. That is exactly where our partnerships begin: you keep the client relationship, we contribute professional accountability and the platform.
Principles
What we hold ourselves to.
Clarity, not alarmism
Risks are named, put in context and prioritised. Fear is not a consulting method, and urgency is not a sales argument.
Security is a leadership responsibility
Information security cannot be delegated to the IT department. We work where decisions are made and liability is carried.
Demonstrability
What is not documented does not count – in an audit, in an incident, or towards an insurer. With us, evidence is produced as work happens, not reconstructed afterwards.
Privacy by default
Data minimisation, German data centres and tenant-separated storage are the default setting, not an add-on – including on this website.
Let’s talk about where you stand.
Whether you have a defined requirement, an open question about NIS2, or an interest in partnering: a first conversation usually settles more than any brochure.