Security Check - Cyberwehr RMS

The Security Check:
a clear course for your company

A ship only sets sail safely if it has been checked beforehand. It is just as important to examine your company for risks, gaps and strengths in data protection, cybersecurity and risk management.

With our 5-minute security check, you will receive an initial assessment of how storm-proof your organization really is – quickly, easily and practically.

Why this check is crucial
Even the most stable ship can be in great danger due to small leaks. In everyday business, unrecognized data protection gaps, missing processes or unclear responsibilities become serious risks. The security check immediately shows you where you are already safe and where there is a need for action.

With the security check you recognize:

Where your company is already navigating stably and safely
Which risks and vulnerabilities are lurking in the dark
What needs to be implemented to make your company future-proof
How to optimally prepare your crew (employees) and your systems
Where you should carry out the detailed risk analysis in the long term and on a recurring basis

Maneuver No. 1:
Gain orientation

We analyze your current situation in terms of data security, legal certainty, risk orientation and information security in a concise and precise manner.
Maneuver No. 2:
Make vulnerabilities visible

You will find out where possible technical attack surfaces or organizational gaps exist.
Maneuver No. 3:
Regain security

Finally, you will receive practical recommendations for action. Compact, understandable, directly implementable.

From the security check
to the comprehensive risk analysis

The security check provides you with the first rough course. If you would like more in-depth insights, the individual risk analysis will strategically guide your company through all the shallows, uncover hidden dangers and show long-term measures for full action and legal security. Please contact us for this.

Where are you in the implementation of the revised
Data Protection Act DSG Switzerland or the EU-GDPR?

Data protection
Sparring

Data protection
impact assessment

Data security,
-backup

DSG / GDPR
Compliance

Is your company
set up in compliance with data protection regulations?

Find out in a few clicks in 5 minutes

Answer the following questions about your processes, systems and responsibilities and receive concrete advice on how you can immediately secure your company. This is the only way to steer safely through the unpredictable waters of data protection, cybersecurity and risk management.

Security Check DP final edit

Step 1 of 4

This set of questions shows whether everything is optimally regulated on board organizationally for GDPR & data protection.

Check 1: Internal guidelines & processes – "Data protection review"
Question 1: Do you have internal guidelines that regulate the handling of personal data?(Required)

Yes, they are documented and known to all employees

Partially, only rudimentary specifications exist

No, we have no clear guidelines
Question 2: Are there defined procedures for controls and audits?(Required)

Yes, regular internal reviews take place

Partially, only sporadic controls

No, the topic is not systematically checked
Question 3: Are employees trained in data protection?(Required)

Yes, all employees regularly

Partially, only selected employees

No, training does not take place
/* Allgemeines Design für die Ergebnisbox */ .ergebnis-box { padding: 20px; border-radius: 12px; margin: 20px 0; font-size: 1.05rem; border: 2px solid rgba(0,0,0,0.15); } /* GRÜN – Sicherer Hafen */ .ergebnis-gruen .ergebnis-box { background-color: #2ecc71; color: #fff; } /* GELB – Mittlere See */ .ergebnis-gelb .ergebnis-box { background-color: #f1c40f; color: #000; } /* ORANGE – Stürmische See */ .ergebnis-orange .ergebnis-box { background-color: #e67e22; color: #fff; } /* ROT – Alarmstufe Rot */ .ergebnis-rot .ergebnis-box { background-color: #e74c3c; color: #fff; }
Moderate Sea
Some regulations are in place, but there are gaps. Recommendation: Data protection sparring for security.
Stormy Sea:
Essential regulations are missing.
Recommendation: Immediate analysis and adaptation of the guidelines.
Red Alert:
Hardly any internal guidelines available.
Recommendation: Immediately introduce binding processes and controls!
This field is hidden when viewing the form
Block 1: Score

This set of questions shows whether all technical measures have been taken to make your company storm-proof.
Check 2: Technical security & home office – "Data security"
Question 1: Are all work devices (notebooks, tablets, smartphones) technically protected (antivirus, firewall, updates)?(Required)

Yes, all systems are secured by default

Partially, not all devices are included

No, there is no uniform protection
Question 2: Are cloud solutions data protection compliant (storage location, access controls)?(Required)

Yes, it is clear where data is located and who has access

Partially, not everything is regulated in compliance with data protection regulations

No, the control is unclear
Question 3: Are home office workstations secured (VPN, access restrictions, encrypted data)?(Required)

Yes, there are binding rules for all employees

Partially, only for individual employees

No, no defined protection
This field is hidden when viewing the form
Block 2: Score
Safe Harbor
Technical systems are largely protected. Recommendation: small fine adjustments, awareness training for employees.
Moderate Sea:
Protective measures partially available. Recommendation: Close security gaps, e.g. VPN, cloud, updates.
Stormy Sea:
Systems are inadequately protected. Recommendation: Urgent measures for IT security and home office guidelines.
Red Alert:
No sufficient technical or organizational security. Recommendation: Act immediately! Urgently secure all systems and train employees.

This set of questions shows how well external risks are controlled so that no one secretly takes the helm.
Check 3: Order processing & external partners – "GDPR Compliance"
Question 1: Are order processing agreements concluded with service providers?(Required)

Yes, always according to GDPR standards

Partially, only with some service providers

No, this is not systematically regulated
Question 2: Are external providers (cloud, software, maintenance) checked for security measures?(Required)

Yes, through regular checks

Partially, only in certain cases

No, external providers are uncontrolled
Question 3: Are employees sufficiently trained to prevent data breaches by external partners?(Required)

Yes, all employees are aware

Partially, only some employees are involved

No, there are no training courses
This field is hidden when viewing the form
Block 3: Score
Safe Harbor:
External partners are correctly integrated. Recommendation: Regular updates of contracts and audits.
Moderate Sea:
Regulations partially available, gaps possible. Recommendation: Check GDPR compliance.
Stormy Sea:
External risks are insufficiently secured. Recommendation: Check contracts, introduce data protection controls.
Red Alert
No control over external partners. Recommendation: Act immediately, otherwise there is a major liability risk!

This set of questions shows how well risks are minimized in a forward-looking manner so that your company does not deviate from its course.
Check 4: Data protection consequences & risk management – "Data protection impact assessment"
Question 1: Are data protection impact assessments (DPIA) carried out for new technologies (AI, cloud, etc.) and video surveillance?(Required)

Yes, systematically and documented

Partially, only for individual/large projects

No, have not been carried out so far
Question 2: Are there clear responsibilities for data protection and information security?(Required)

Yes, exactly defined roles and responsibilities

Partially, roles not exactly assigned

No, no responsibilities available
Question 3: Is there an emergency plan for data breaches or cyber attacks?(Required)

Yes, securely documented and practiced

Partially, only rudimentarily created

No, an emergency plan does not exist
This field is hidden when viewing the form
Block 4: Score
Safe Harbor:
Risk management and DPIAs available. Recommendation: Carry out regular recurring monitoring.
Moderate Sea:
Partial implementation available, identify gaps. Recommendation: Introduce data protection impact assessment.
Stormy Sea:
Forward-looking risk management inadequate. Recommendation: Plan and implement measures as quickly as possible.
Red Alert:
No risk analyses available. Recommendation: Act immediately, otherwise there is a risk of loss of control in the event of data breaches!

From the initial assessment to complete protection:
Secure your risk analysis!

Don’t miss this opportunity: With our individual risk analysis , you can ensure that you are always in control on every leg of the journey.
Together we will check all critical points, create clear action plans and make your company storm-proof.
Strategically in the processes, organizationally, technically and legally.

The Security Check: a clear course for your company

With the security check you recognize:

From the security check to the comprehensive risk analysis

Where are you in the implementation of the revised Data Protection Act DSG Switzerland or the EU-GDPR?

Data protectionSparring

Data protectionimpact assessment

Data security,-backup

DSG / GDPRCompliance

Is your company set up in compliance with data protection regulations?