Health & Pharma

Information Security Risk Management in Medical Technology

Risk assessment and training in ten companies on three continents

Person with a tablet, above it medical symbols and charts in blue
10companies on three continents

Project

Health & Pharma · Cyber & Compliance

  • Global family-owned medical technology manufacturer, new client in 2024
  • Risk management at headquarters and in ten subsidiaries in North America and Asia
  • Follow-on package: support for an SAP security audit across eight systems
  • February to December 2024
  • approx. €250,000
  • Framework contract for fixed-scope delivery, seven packages with partial acceptance

Challenge

  • Methodology and templates in place, assessment and rollout into the organization missing
  • Preparation for the ISO/IEC 27001 audit with gap analysis and measures by the end of the year
  • Assess third-party and project risks worldwide using one procedure

Solution

  • 50 risk assessments according to the client methodology: 25 third parties, 25 projects
  • Four risk catalogs and five process trainings
  • Third-party risk management rolled out in ten subsidiaries, with key-user support
  • On-site strategy workshop, security expertise and evidence for the SAP audit

Result

  • Seven work packages accepted with quarterly delivery dates
  • ISO/IEC 27001 audit preparation completed, measures reported every quarter
  • Risks from projects, products and suppliers assessed using one group-wide procedure

Cyber & Compliance

Your next step

Get in touch now!

Whether you have a concrete project, need initial guidance or have other questions: tell us briefly what it is about.

Discuss your project