You do not know how secure your company is
Your IT provider says everything is fine. A report you can read and pass on does not exist.
IT security for mid-sized companies
IT security for mid-sized companies, backed by evidence.
For management in companies with 50 or more employees who are not sure how secure their company is and do not employ a security specialist. We review as an independent second opinion alongside your IT provider, implement what is missing and, if you wish, operate security permanently. You end up with evidence you can show to insurers, customers and auditors.
- For whom
- Companies with 50 or more employees, including those with an external IT provider
- First step
- Security Assessment, read access only, removed afterwards
- Then
- Implement, operate or hand over to your IT with documentation
- Result
- Report for management, evidence for insurers and customers
- Price
- from €3,500, Fixed price for the first step, the Security Assessment
Sound familiar?
When management teams come to us
We specialise in companies that work with Microsoft 365. You do not need technical background for the conversation.
Questions come from outside
Your cyber insurer, a major customer or an auditor wants to know how your company is protected and asks for evidence.
You carry the responsibility
After an incident, people ask what was done beforehand. Dated evidence answers that.
How does working together start?
You start with a manageable step at a fixed price and decide afterwards how to continue.
-
30 minutes
Introductory call
You speak directly with Bastian Wenske, founder and managing director.
-
Fixed price, read-only
Security Assessment
How secure is your company, and what comes first?
-
Based on findings
Secure
Close the gaps by risk, done by us or your IT provider.
-
Your choice
Operate or hand over
We operate security for you, or your IT takes it over with documentation.
How secure is your company today?
The Security Assessment answers that in writing, with an order for the next steps.
Two paths
Have it operated or take it over
Both paths lead to the same standard. After the assessment you decide which one fits your company.
We operate security for you
Managed security from €2,500 per month: we review security alerts, respond to incidents and evidence the status every month. Your environment, data and documentation stay with you.
Managed Security & SOCWe hand over to your IT with documentation
We set up security and hand it over with documentation and runbooks to your IT team or provider, who then operate it themselves.
Microsoft 365 hardeningFrequently asked questions
Who helps mid-sized companies with IT security?
Wenske Cyber Solutions (WCS), based in Berlin, works for companies with 50 or more employees that use Microsoft 365. The first step is a fixed-price Security Assessment from €3,500: you find out how secure your company is and what to do first. We then close the gaps and either operate security permanently or hand it over to your IT with documentation.
How much does IT security cost for a company with 50 employees?
The Security Assessment is a fixed price from €3,500, depending on the size of the environment. For ongoing operation there is managed security in three tiers from €2,500 per month. Microsoft licences come on top. Which tier fits becomes clear after the assessment.
Do we need our own IT security employee, or is an external provider enough?
With managed security we take over monitoring, incident response and the monthly evidence, without you creating a position for it. Your IT provider remains responsible for workplaces and user support. If you want to run security yourselves later, we hand it over with documentation.
Am I liable as managing director if we are hacked?
That depends on the individual case and is a legal question we do not answer. What we provide is evidence of what you put in place: a dated report on your security status, the measures with their priority and, in operation, evidence every month. If your company falls under NIS2, the responsibility of management is set out there explicitly.
How do I prove that we did what was necessary for IT security?
With documents a third party can check: a dated report on the current status, a list of measures with priorities and evidence that they were implemented. The Security Assessment provides the first part, the implementation the second. With managed security you receive up-to-date evidence every month.
Can we outsource IT security and still stay in control?
Yes. Responsibility stays with management, while operation, monitoring and documentation can be outsourced. With WCS your environment, your data and the documentation stay with you. We only make changes after your approval, and you receive a report every month.
You carry the responsibility. We provide the evidence.
In a 30-minute introductory call we clarify where your company stands and what to do first.