Always ready for audits thanks to a centrally controlled ISMS
The Challenge
As the largest regional telecommunications provider, NetCologne attaches great importance to information security, compliance, and the protection of sensitive data. In order to meet these high standards on a permanent basis, legal and regulatory requirements must be regularly reviewed and verified in several audits per year. Early on, the company decided to set up its own information security management system (ISMS) in order to tailor processes precisely to its own organization. With growing scope, new data sources, and increasing requirements, the desire arose to further develop the system in a targeted manner: more flexible, more transparent, and optimally prepared for upcoming audits. Instead of using a standard solution, NetCologne relied on Hyand's comprehensive expertise to tailor the solution to its own needs.
Our solution
Since 2022, we have been supporting our customer in the continuous development of a customized ISMS based on Oracle APEX. In close cooperation with the information security officer, requirements are prioritized and implemented in an agile manner. New audit requirements are incorporated directly into further development via a Kanban board and daily coordination meetings. The solution comprises three central applications:
- Application management, including GDPR maintenance
- asset management
- risk management
The result
NetCologne is always ready for audits. Risks, assets, and measures are transparently linked and clearly traceable for all parties involved. Asset managers and implementation managers can see at a glance where action is needed. Open measures can be prioritized in a targeted manner and tracked efficiently. This makes audits more structured, faster, and significantly less manual.
The most important facts in brief
Customer benefits at a glance
- High audit security thanks to data that is always up-to-date and ready for evaluation
- Significant time savings in audit preparation
- Transparency regarding risks, assets, and measures
- Better collaboration between departments and information security
- Future-proof solution that grows flexibly with new requirements
Technologies used
- Oracle APEX
- PL/SQL
- SQL
- JavaScript
- CSS
- Agile development
- Kanban
_hyand_success_stories
Discover our digital solutions
You too can benefit from our extensive experience with projects involving companies of all sizes.
HyExpert - the IT talk.
Would you like to know how you can take your company forward with our customized IT solutions? Do you have questions about specific digital challenges?
Contact us - we'll help you!