Consulting IT security and ISMS

Netze Duisburg GmbH is the local distribution network operator for Duisburg and a 100% subsidiary of Stadtwerke Duisburg AG. Its core tasks include the planning, operation, expansion and maintenance of the supply networks for electricity, gas, water and district heating.

In context of the IT security catalog of the BNetzA according to EnWG §11 (1a), we have set up and certified an information security management system (ISMS) for the organization and and the operation of the process IT, secunet advises on operational and strategic topics and issues of information security. In addition, secunet supports Netze Duisburg GmbH with the certification and monitoring audits for the critical infrastructures of electricity electricity, gas and water.

The following consulting services have been implemented in the projects:

• Creation of security and operational concepts
• Internal audit (preparation/ audit planning, implementation/ inspections stations, audit report/ reconciliation, follow-up)
• Audit supplier main IT department (preparation, execution, audit report, follow-up)
• Conversion to the new version of ISO 27019 (audit of the Implementation/ justification/ SoA)
• Verification water (preparation, accompaniment testing, support with BSI/ forms)
• Risk management (analysis, workshops, description of the method/ adaptation guideline/ documentation).
• Accompaniment of certification audit