An extract from our

References

We let (reference) projects speak for us

Below you will find some examples of reference projects that we have carried out in various areas. This extract gives you an insight into our current and successfully completed projects and thus also into our service portfolio. We would like to thank our customers for their trust and permission to publish their projects on this page.

Projects carried out in the field of cyber security

Reference

Safety inspection

As part of Trusted Site Privacy, TÜVIT carried out a security analysis of Telekom's "fixed network and mobile postpay billing systems for private customers". This included penetration tests at network and application level, tests on the web application and a configuration analysis.

To the Deutsche Telekom AG website

Reference

IT security checks

TÜVIT has already carried out several cybersecurity projects for the AOK Bundesverband. These include technical security investigations, such as penetration tests against mobile & web-based applications or IT infrastructure components, configuration analyses at system level and source code analyses.

To the website of the AOK federal association

Reference

Safety inspection

Stadtwerke Essen commissioned TÜVIT to carry out a security analysis of selected IT control technology infrastructure components (OT). Among other things, automated port and vulnerability scans from internal/external at network level, a system review and a firewall ruleset review were carried out.

To the website of Stadtwerke Essen

Reference

Safety inspection

TÜVIT conducted a security investigation for Hamburger Hafen und Logistik AG to determine whether security-relevant content of the two IT solutions "Seafile" and "COAST" was readable, whether the applications contained vulnerabilities and which system components were vulnerable.

To the website of Hamburger Hafen und Logistik AG

Reference

Safety inspection

The security investigation for DJE Kapital AG included pentests against selected IT infrastructure components & a selected web application, a qualified attack on the WLAN infrastructure, passive tests from internal to network level, a lost device check & a firewall ruleset review.

To the DJE Kapital AG website

Projects carried out in the field of hardware and software evaluation

Reference

PAD exam

As an independent testing body, TÜVIT tested the system for Presentation Attack Detection (PAD) developed by BioID GmbH in accordance with the FIDO Presentation Attack Detection Criteria & ISO/EIC 30107-3. The aim was to evaluate the PAD mechanism with regard to the detection performance of artefacts.

To the BioID GmbH website

Reference

Common Criteria (CC) Site Evaluation

TÜVIT carried out an evaluation according to the Common Criteria at AustriaCard in preparation for an upcoming certification of the company. As part of the service, the site security documents were evaluated, a required audit was carried out and an evaluation report was prepared.

To the AUSTRIACARD GmbH website

Reference

CC evaluation

TÜVIT evaluated the network connector of KoCo Connector GmbH in accordance with the requirements of the Common Criteria Protection Profile BSI-CC-PP-0097. The network connector was methodically tested and verified according to EAL (Evaluation Assurance Level) 3+ on the basis of the aforementioned Protection Profile.

To the KoCo Connector GmbH website

Projects carried out in the field of data protection

Reference

Position of an EDPS

TÜVIT provides an external data protection officer in accordance with the GDPR/BDSG for six companies of the Steigenberger Hotel Group. TÜVIT also acts as a data protection expert for three other subsidiaries in Switzerland, the Netherlands and Belgium.

To the website of the Steigenberger Hotel Group

Reference

Position of an EDPS

The German branch of the Dutch group of companies Van Ameyde International B.V. supports TÜVIT by appointing an external data protection officer. Among other things, this officer monitors compliance with the relevant data protection regulations and trains the employees involved.

To the website of Van Ameyde Germany AG

Reference

TÜVIT Trusted Site Privacy (TSP) Audits

Based on TÜVIT's own Trusted Site Privacy procedure, TÜVIT evaluated the web portal for employee services of the corporate benefits group with regard to aspects of operational data protection. The audit procedure was supplemented by an additional technical security examination.

To the website of corporate benefits GmbH

Reference

Data protection implementation in accordance with the EU GDPR

TÜVIT supported Garagen Carport Profis with regard to adapting the existing data protection management system to the legal requirements of the EU GDPR and the new Federal Data Protection Act. The focus was on the measures taken to handle personal data in compliance with data protection regulations.

To the website of Garagen Carport Profis GmbH & Co. KG

Projects carried out in the field of ISMS

Reference

Re-certification according to ISO 27001

The E-POST platform of Deutsche Post DHL GROUP was analysed by TÜVIT with regard to the implementation of the protective measures of the IT baseline protection compendium. The scope of the examination included the products Digital Copy, eIDAS Brief, the optional end-to-end encryption and other applications.

To the Deutsche Post DHL Group website

Reference

Auditing services for ISO 27001

TÜVIT planned, carried out and followed up a certification audit and two surveillance audits for NÜRNBERGER Versicherung in accordance with ISO 27001 on the basis of IT baseline protection. The goal was the subsequent successful certification according to the international standard.

To the website of NÜRNBERGER Versicherung

Reference

ISO 27001

TÜVIT supported C&P Capeletti & Perl Gesellschaft für Datentechnik mbH in maintaining and improving the existing information security management system (ISMS) based on the international standard ISO 27001:2013.

To the website of C&P Capeletti & Perl GmbH

Reference

GAP analysis according to ISO 27001

caplog-x GmbH supported TÜVIT on its way to successful certification in the form of a GAP analysis in accordance with ISO 27001. The analysis focussed on conformity with standards and procedures. This included criteria such as the degree of implementation of the ISMS core processes or the responsibility of the management.

To the website of caplog-x GmbH

Projects carried out in the field of Industry 4.0

Reference

IEC 62443-4-1 certification

TÜVIT assessed SEW-EURODRIVE GmbH & Co. KG in accordance with IECEE regulations. The assessment was based on the requirements of IEC 62443-4-1. The process for IEC 62443-4-1 certification was carried out by the subcontractor TÜV NORD CERT GmbH.

Website of SEW-Eurodrive GmbH & Co KG

Reference

Certification assessment IEC 62443-2-4

The Croatian system integrator KONČAR-KET commissioned TÜVIT to test the PROZA NET SCADA system for compliance with IEC 62443 2-4. In addition to the document review, a cyber security assessment was also carried out. The certification was carried out by TÜV NORD CERT.

To the Končar Group website

Become a reference customer now!

Are you missing your project on our reference page? We can change that! Simply click on the following link and complete our declaration of consent for the use of company data for reference purposes.

To the declaration of consent