Everything we have written on AI in the business and on security, in one place: articles, whitepapers, tools and the answers to the common questions.
Four ways in. The library below searches all four at once.
Search for the term on your mind, or filter by topic. 293 entries, all from our own work.
293 entries
Bring the task you have been putting off for weeks. In two hours you see it solved without and with your company knowledge, take your profile with you and carry on by yourself afterwards. CHF 750.
See the serviceOne workflow is rebuilt from the result backwards and after four weeks runs without the people who do it today. Measured against a baseline, priced from a joint calculation.
See the serviceSomeone who owns AI at your side, without you having to hire them. Managed AI as a monthly fee from CHF 5'000, cancellable monthly, all of it belongs to you.
See the serviceEleven tools for your own chat tool: checklist, working style, company profile, interviewer, traffic light, baseline sheet and more. Copy, paste, answer. No login, no email address.
See the serviceExternal CISO for Swiss SMEs on a mandate basis: 1 to 4 days per week instead of a full-time hire. Risks assessed, board reporting, decisions documented.
See the serviceIT security consulting and security operations for Swiss SMEs: the same breadth as a CISO mandate, project and topic based, without handing over control.
See the serviceISO 27001 ISMS for Swiss SMEs, from assessment to certification readiness. Lean, fit for daily operations, we stay until the system stands. ISG deadline 2026.
See the serviceSecurity assessment for Swiss SMEs at a fixed price: gap analysis, prioritized action plan, implementation of the top 3 measures, stop list included.
See the serviceIn-house training for executive management under Sec. 38 BSIG and NISG 2026: your own risks, a rehearsed crisis, documentation for the record. On site or online.
See the serviceAI governance, AI risk analysis and secure AI adoption for Swiss SMEs. From usage policies and nDSG-compliant use to ISO/IEC 42001 readiness.
See the serviceYou know which of the seven reasons is in your way, and what helps against it this week.
Open the toolOne page that makes drafts sound like you instead of like nobody.
Open the toolThe same task solved twice, and how many minutes of rework each version still needs.
Open the toolA one-page profile of your company, from public sources, corrected by you.
Open the toolFour documents on role, team, priorities and style that your AI knows from now on.
Open the toolA sorted list of where starting pays off for you, and why not with the obvious.
Open the tool"How I do it" becomes a work instruction with test cases.
Open the toolAn hour of talking turns into decisions, tasks with who and by when, and open points.
Open the toolFor each step of a workflow: what the AI may do alone, what must check back, what needs an approval.
Open the toolThe lines in your profile that need to change this week, and new rules from your annoyances.
Open the toolWhat a workflow costs you per year today, in francs, from your own figures.
Open the toolAI is already running in your company, often without the IT department knowing. A pragmatic framework helps Swiss SMEs structure this.
Request the whitepaperA practical guide to ensuring business continuity beyond traditional disaster recovery.
Request the whitepaperOne of the greatest deal risks often receives at best a superficial examination: the technology.
Request the whitepaperStructured Governance for Business Value
Request the whitepaperHow security investments are transparently measured and anchored as strategic value drivers within the company.
Request the whitepaperCalculate what a workflow costs before you rebuild it: five items, two of which no time tracking shows. That is how you get the number you will later miss.
Read the articleAI in customer contact: the labelling duty in Swiss law binds federal bodies. The duty next to it binds you, and it needs a person named before the request.
Read the articleReducing security spending often fails on the contract: licences only go back in a narrow window. Which deadlines count and what to do beforehand.
Read the articleAn assessment delivers findings, not a plan. How to build an IT security remediation plan that is still alive after three weeks. Set the order of work now.
Read the articleISO 27001 mandatory documents: which documents the standard requires, where the records begin and what you can delete from the template pack. Read on.
Read the articleMicrosoft 365 hardening is not a checklist project. Check what the defaults already cover, where protection gets rolled back and who owns the exception.
Read the articleSecurity clauses in customer contracts create duties nobody budgeted for. Which ones cost the most, and who has to review them before signature.
Read the articleThe ISO/IEC 27090 for AI security has arrived. Why it is not a new project for most Swiss SMEs, and what it is still good for.
Read the articleEvery CISO mandate ends. What goes missing is rarely technical knowledge, it is the reasoning behind the decisions. Here is how to keep it in house.
Read the articleAccess rights grow and are rarely withdrawn. Why access rights management in an SME is a leadership question, who has to approve and where rights cost money.
Read the articleIntegrating AI governance into your ISMS: the five places where AI touches your ISO 27001 system, and what you do not have to build for it. Read on.
Read the articleInternal audit under ISO 27001 clause 9.2: the standard asks for objectivity, not an external auditor. What that means in an SME and where you can save.
Read the articleOptimising security costs does not mean never buying again. The three conditions under which a security spend pays for itself, and what you can cut.
Read the articleSwitzerland has no AI law and the draft is only due end of 2026. What already binds you today, and where to start before a customer asks.
Read the articleThe BACS ICT minimum standard is a recommendation for most SMEs: 106 tasks and no target value. Who sets that target decides what your assessment is worth.
Read the articleLLM security risks: the OWASP list has ten items, but you decide only three. Which ones they are and what you can skip. Initial conversation free of charge.
Read the articleAI agents could review suppliers in minutes. DORA, FINMA and the Data Protection Act require the review anyway. What is usually missing is your own requirements catalogue.
Read the articleAn Intune rollout in an SME rarely hangs on the technology. It hangs on two decisions. What wipe and retire really do, and who presses the button.
Read the articleData protection advisor in an SME: optional in Switzerland, no fine, yet with one concrete benefit. Where the role fails. Initial conversation, no strings.
Read the articleEvaluating AI tools without a questionnaire marathon: what the tool sees, what it may change and who answers for the result. First conversation free.
Read the articleAn ISO 27001 gap analysis shows which documents are missing. Not whether you can operate them. What the list delivers and how to spot a usable one.
Read the articleA managed SOC detects attacks. Someone at your company still has to respond. What the quote covers, what waits behind it, and when 24/7 monitoring pays off.
Read the articleOutsourcing security responsibility: what Swiss company law calls non-transferable, what a CISO mandate takes over and what stays with you. Get clarity now.
Read the articleRented software bundles three things: screen, records and rules. AI agents need only two of them. Four questions to ask before your next renewal.
Read the articleHow do you find AI use cases that pay off? Back to basics: the profit tree, the value chain, costs by activity and the bottleneck, and why time saved is not money saved.
Read the articleBuild an AI inventory: why the first AI in an SME usually arrives from the vendor, where to find it and what belongs in the list. Get the overview now.
Read the articleA cyber insurance policy does not reduce risk, it finances it. What policies in an SME cover, what the questionnaire demands and where claims come apart.
Read the articleMicrosoft 365 Business Premium vs E5: what each tier contains, which difference counts during an incident and when the upgrade pays off. Read on.
Read the articleSecurity awareness in an SME rarely fails on knowledge. Why the annual module changes little, and which number tells you more than the click rate.
Read the articleAn IT provider runs your security, it does not carry the accountability. How to spot the gap and which decisions have to stay inside your company.
Read the articleA security budget in an SME is rarely too small, usually invisible. Why the percentage question fails, which three pots matter and what the board needs.
Read the articleThe reporting duty for a cyberattack in Switzerland: who must report to BACS within 24 hours, what the Data Protection Act requires and where the fine applies.
Read the articleSince December 2025 executive management has to attend training regularly. What that means in practice and what the evidence looks like.
Read the articleAustria's NISG 2026 applies from 1 October 2026. Governing bodies need training designed for them, with no grace period.
Read the articleTwo blocks, ten guiding questions and a crisis exercise in three acts. What actually works in four to five hours with a leadership team.
Read the articleAn IT risk register changes nothing until somebody signs. How to spot one that holds up, and who is actually allowed to accept a risk in an SME.
Read the articleDeepfake fraud clones your boss's voice from ten seconds of audio. What protects you is not detection but your payment release path. Read the one hour check.
Read the articleInformation security in SMEs explained: how it differs from IT security and data protection, who is responsible and what applies in Switzerland. Read now.
Read the articleA customer security questionnaire rarely fails on missing controls. Why it delays deals and what makes an honest no stronger than a polished yes.
Read the articleThe ISO 27001 scope decides the effort, the timeline and what your certificate is worth. The test for whether you cut it right takes an hour. Read on.
Read the articleWhat does IT security cost an SME? Why percentage benchmarks are useless and which four blocks actually make up the spend. Book an informal first call.
Read the articlePrompt injection explained: why the gap is not in the language model but in the permissions you hand your AI tools. Book an informal first call.
Read the articleRansomware protection for SMEs does not start with a tool. It starts with one question: who can delete your backup? Swiss figures and a test you can run.
Read the articleA security roadmap rarely fails on the list, it fails on capacity. How an SME orders the work, how much fits into a quarter and what it costs to run.
Read the articleISO 27001 timeline for SMEs: why certification hinges on operating time and decision speed rather than on the project plan. Book an informal first call.
Read the articleWhether an AI tool is permissible often comes down to one contract: the data processing agreement under Art. 9 nDSG. What it covers and how to check it.
Read the articleYou do not manage supplier risk with questionnaires for everyone. Which suppliers can stop your business, what you can demand and what the rest get.
Read the articleConditional Access is included in Microsoft 365 Business Premium and still sits unused in many tenants. What it does and how your SME gets started.
Read the articleShadow AI is not a discipline problem but a demand signal. Why a ban only hides the usage and which three steps bring it under control instead.
Read the articleISO 27001 or SOC 2? Which proof convinces which customers, why the answer sits in sales rather than security, and when it pays to hold both.
Read the articleMicrosoft 365 keeps the service running, not your data. What the built-in retention windows cover, where gaps remain and how to decide cleanly for your SME.
Read the articlePhishing prevention in business is an architecture question, not a behavior question. What counts before and after the click, and where to start: read here.
Read the articleWhich data can go into ChatGPT? The tool doesn't decide, your data order does: three lists on one page. The pragmatic framework for Swiss SMEs, with examples.
Read the articleWhat does a security assessment deliver? Not a thick PDF but decisions: prioritized actions, a cut list, budget arguments. What to look for before you buy.
Read the articleISO 27001 certification: how stage 1 and stage 2 work, what nonconformities mean and where SMEs fail in the audit. A sober guide. Book an intro call.
Read the articleISO 42001 cost for SMEs: the three cost blocks, the biggest saving lever and why the certificate can usually wait. Get your assessment in a first call.
Read the articleSecurity monitoring in SMEs rarely fails on technology. It fails because nobody acts on alerts. How to measure your setup with one exercise. Check it now.
Read the articleDo we need an AI policy? No legal duty in Switzerland, but you still need one: the four questions it must answer and why one page is enough. Read now.
Read the articlePatch levels impress no board. Which security KPIs management and the board need, how often to report and why fewer numbers build more trust.
Read the articleA scanner is not vulnerability management. Why scan reports alone do not protect your SME and what to put in place instead. Read the article now.
Read the articleLetter, email, chat, now agent chat. Every layer arrived as relief and stayed as another queue. Why agent chat is the first channel with no human speed limit, and why chat is the wrong form for management.
Read the articleRolling out M365 Copilot securely: the risk is not the AI but permissions grown over years. What must be in place before the rollout. Book an intro call.
Read the articleRunning IT security without a security team is the norm for Swiss SMEs. Which four jobs need an owner, which operating models work and where you start.
Read the articleISO 42001 vs ISO 27001: what separates the two standards, where they overlap and when your SME needs its own AI certificate. With a decision guide.
Read the articleWhat security awareness training delivers in SMEs and what it does not: the evidence, three stronger measures, and the check before your next renewal.
Read the articleHow secure is my company? Why neither a score nor gut feeling answers the question, and the four questions to ask instead. With a practical test.
Read the articleAn up-to-date asset inventory is the foundation of all IT security. Why it is the number one control and how to build one when none exists.
Read the articleISMS as a Service promises information security without effort. What you buy, what stays with you, and the three questions that protect you from a paper ISMS.
Read the articleMeasuring cyber security ROI sounds rigorous but rarely adds up. Which metrics show the value of your security spend, and how to start with one hour.
Read the articleData protection impact assessment under Art. 22 FADP: when your SME needs one, when it does not, and how lean it can be. Includes a three-question test.
Read the articleNobody tells you when enough security is enough. Right-sizing IT security: based on exposure and operations, not the vendor offer. With three test questions.
Read the articleAI does not make attacks smarter, just faster and cheaper. Why your patch window becomes the problem and what actually matters for an SME.
Read the articleAI agents do not ask permission, they act. Why that needs a new kind of control and which three questions are enough for an SME.
Read the articleCISO responsibilities in an SME: less technology, more decisions. What the role delivers day to day, what does not belong and how to tell it is filled.
Read the articleAI agents rarely fail because of the technology. They fail on five work packages hardly anyone plans for: data access, permissions, process knowledge, new workflows, ongoing upkeep.
Read the articleISO 27001 and TISAX cover related content but do not replace each other. Who requires which proof and how to decide as a supplier: read our guide here.
Read the articleAfter a cyber incident the pressure to buy is highest and decision quality lowest. Why a structured security check comes before any purchase: read here.
Read the articleDORA has applied in the EU since January 2025 and reaches Swiss suppliers via contract annexes from financial customers. What is fixed and what is negotiable.
Read the articleDo you need a CISO? Most Swiss SMEs do not need the title but someone who owns security: deciding, prioritising, reporting. Take the three-question test.
Read the articleA security assessment before ISO 27001 shows what already exists, what is missing and how big your scope needs to be. Why the order matters. Read on.
Read the articleConsolidating security tools happens at the renewal date, not in a workshop. Three questions to ask before you renew the next security tool. Read on.
Read the articleHow much does ISO 27001 cost for an SME? Why the certificate is the smallest item, where the money goes and how to keep the scope small. Read our breakdown.
Read the articleCISO or information security officer? We explain the difference between the two roles, the thinking error behind it and which setup your SME needs.
Read the articleInformation security management system (ISMS) obligation by the end of 2026: Very few Swiss SMEs are directly affected. Check whether you are in scope before you panic with certifications.
Read the articleAn AI model escaped an isolated test environment and breached Hugging Face. The real lesson has nothing to do with AI, but rather with network isolation.
Read the articleODCUS is inspired by Odysseus. What the Greek hero has to do with modern IT security, and why the journey to the destination is rarely a straight line.
Read the articleHow much does a security assessment cost in Switzerland? Honest price ranges, real cost drivers, and how to recognize a fair offer. Book your initial consultation now.
Read the articleFor data privacy violations, the company doesn't pay. You do, personally, up to 250,000 CHF. What the new FADP means for managing directors and how you can protect yourself.
Read the articleAI governance sounds like a brake. In reality it's what makes AI dependable in operations: which tools, which data, who reviews, and why a PDF isn't enough.
Read the articleHow much does a CISO cost in Switzerland? We compare full-time employment against CISO as a Service to show you which model is truly worthwhile for your SME.
Read the articleSatya Nadella and Alex Karp warn: Anyone using AI transfers knowledge to the provider. What lies behind the Reverse Information Paradox and what you can do about it.
Read the articleAI isn't changing the organizational chart, but rather the information architecture. Why companies are getting an AI operating layer, and why context is at its core.
Read the articleSecurity Assessment or Penetration Test? We explain the difference, when your SME needs which one, and how to avoid wasting your security budget.
Read the articleThe NDB situation report 'Switzerland's Security 2026' sounds like espionage and terror. Why the hybrid threat hits Swiss SMEs more directly than you think.
Read the articleBoard of Directors' liability in cybersecurity: Why, under Art. 717 CO and the new FADP, it is not more security that protects you, but documented due diligence.
Read the articleAI drastically shortens the time to exploit new vulnerabilities. Why SMEs are failing to keep up with patching and must reduce their attack surface now.
Read the articleMultiple AI agents are running, you review every output, and everything bottlenecks at your end. Why you are the bottleneck and how Quality Gates make agents more autonomous.
Read the articleCYA culture doesn’t arise from cowardice, but from rational adaptation to systems that punish mistakes. What it costs and how it spreads.
Read the articleThree terms, three different models. What vCISO, Fractional CISO, and CISOaaS mean, which model is right when, and what you should pay attention to when choosing.
Read the articleGood IT is not enough. What the security leadership gap is, when it becomes a problem, and what a fractional CISO concretely changes for Swiss SMEs.
Read the article71% of internal IT builds fail. The alternative? Not much better. What really goes wrong in the build-vs-buy decision, and how to do it better.
Read the articleYour firewall won’t protect you from the next SolarWinds. Why supply chain security is the biggest blind spot, and what you can do now.
Read the articleAI strategy often fails not because of the technology, but because of organizational mistakes. The 5 most common patterns, and how to avoid them.
Read the articleThese 5 IT vendor contract clauses really protect you, but hardly any service provider offers them voluntarily. Here’s what you should demand.
Read the article80–120 SaaS tools per SME, but IT knows only half of them. We show how SaaS sprawl happens and how you can recover 30–40% of the costs.
Read the articleIT License Management: How to uncover shelfware, zombie licenses, and tier mismatches and permanently save 15–30% on software costs.
Read the articleDon’t just reduce IT costs. Manage them strategically. Our framework shows how SMEs can build real cost control in 5 steps.
Read the articleIT is not a cost center. It is a competitive advantage. We show what Business Centric IT looks like in practice and what that means for your company.
Read the articleAI initiatives fizzle out because they depend on individual people. Here is the pragmatic AI competency team model for SMEs - small, effective, without overhead.
Read the articleSME IT looks the same everywhere. Not because it’s best practice, but because MSP standards, vendor marketing, and a lack of strategy are all pushing in the same direction.
Read the articleThe EU AI Act also affects Swiss companies. Risk categories, timeline, and concrete steps for implementation.
Read the article5 strategic questions that every managing director should be able to answer in 30 minutes.
Read the articleCFOs don’t need technical cybersecurity expertise, just the right questions. What you, as a CFO, need to know about cyber risk, costs, and insurability.
Read the articleCloud repatriation saves Swiss companies 30–40% on stable workloads compared to the public cloud. When moving back pays off, and how to calculate it.
Read the articleCyber risk is real, but it is only one of many business risks. How to assess it proportionately and allocate your budget correctly.
Read the articleLegacy System Costs: Why your legacy system is not an IT problem, but a financial risk.
Read the articlenDSG Swiss Data Protection Act: What has changed since 2023, how it differs from the GDPR, and what Swiss SMEs now need to do specifically.
Read the articleImplement data classification pragmatically: four protection levels, concrete measures, and a half-day workshop as a starting point. For SMEs that need structure rather than theory.
Read the articleAI agents are more than chatbots, but they are not a cure-all. We show where agentic AI works today, where it fails, and how you can get started with the right pilot project.
Read the articleBoard-ready IT starts with the right language. Here’s how to communicate as an IT leader with the board of directors: clearly, credibly, and on equal footing.
Read the articleAssess IT maturity yourself: 5 dimensions, 4 stages, 1 clear picture. Find out where your company really stands, before something breaks.
Read the articleA cyberattack can affect even well-protected companies. How up to date is your incident response plan, and has it ever been tested under real-world conditions?
Read the articleCompliance as a project doesn’t work. As an ongoing operation, it does. Here’s how to permanently integrate compliance requirements into your processes.
Read the articleIT cost allocation makes IT expenses visible by department. We explain showback, chargeback, and how you can get started pragmatically.
Read the articleIT offers are intentionally difficult to compare. 7 places where costs are hidden, plus the checklist you can use to review any quote in 30 minutes.
Read the articleEU AI Act Article 4 makes AI training mandatory. What real AI literacy is and how to get started.
Read the articlePrioritizing AI use cases: 2x2 matrix, quick wins, and an evaluation framework from practice.
Read the articleCyber insurance for SMEs: What policies really cover, which exclusions can become costly in an emergency, and how you can lower premiums through better security.
Read the articleFinOps is more than just saving on cloud costs. How Swiss SMEs can get their cloud spending under control through transparency, clear accountability, and a monthly review.
Read the articleIT governance for SMEs doesn’t have to be complicated. In five steps, establish clear IT decision-making structures that are truly put into practice. Pragmatic, without bureaucracy.
Read the articleIT operating model for SMEs: How to clarify what stays in-house, what is outsourced, and who makes IT decisions. Practical, with a concrete real-world example.
Read the articleMulti-vendor strategy for SMEs: The four-level model for three to five IT partners, with a decision-making framework and concrete guardrails against dependency.
Read the articleYour employees are using AI, but without rules. How to build a pragmatic AI governance framework in 4 weeks that protects without slowing you down.
Read the articleThe EU Cyber Resilience Act makes SBOM, Security by Design, and CE marking mandatory. What Swiss software manufacturers and IT buyers need to know now.
Read the article15 questions for your IT vendor evaluation that don’t appear in any standard RFP. Three blind spots that make all the difference.
Read the articleIT sourcing decision guide for Swiss SMEs: four models, five criteria, common mistakes. Which model is right for your situation?
Read the articleAn ISMS doesn't have to be complicated. Here is the pragmatic approach for SMEs: clear scope, phased implementation, and a system that fits the company.
Read the article49% of IT project failures are caused by poor vendor selection. The 5 decision-making traps - and how to escape them.
Read the articleMany SMEs buy AI tools before they know which problem they want to solve. How to structure your first AI pilot so it delivers real value.
Read the article80% of employees use shadow IT – despite policies and training. The uncomfortable truth: shadow IT is not the problem. It is a symptom.
Read the article84% struggle with cloud costs, 27-32% are wasted. Only 30% can identify what they are paying for. The path to transparency and 25-40% savings.
Read the articleTechnical debt costs large corporations an average of 370 million dollars annually. A concept your CFO needs to understand.
Read the article65% have too many security tools. 74% of ransomware victims are juggling too many. The solution? Consolidation provides 4x ROI and 74 days faster detection.
Read the articleThe 4 biggest IT lies that vendors and consultants like to tell – and what really lies behind them. With specific questions that uncover the truth.
Read the article75% of project participants know that their project will fail. They just don't say it. The 5 warning signs you must not ignore.
Read the articleThe 7 IT issues we find in every SME – and why it's not your fault. With quick wins that cost nothing.
Read the article70% of IT projects exceed their budget. Discover the structural reasons for cost overruns and how to budget realistically.
Read the articleAI projects fail not because of the technology, but because the fundamentals are missing. Our 5-dimension check shows whether your company is ready for AI.
Read the article80% of your security effectiveness comes from 20% of the measures. Find out how Swiss SMEs prioritize their security budget, with frameworks and concrete figures.
Read the articlePerfect redundancy is priceless. MVO defines the minimum to continue working. We show you how to develop fallback options for critical processes.
Read the articleIn times of crisis, speed matters more than perfection. We show you how to build clear decision-making structures that work under pressure.
Read the articleMost BC plans don't fail due to missing documents but because of the wrong focus. We'll show you why IT-focused DR plans won't save your business.
Read the articleRegulation as a burden? Or as a checklist for what you need anyway? We'll show you how NIS2 and FINMA structure your operational resilience.
Read the articleOperational resilience goes beyond IT disaster recovery. We will show you the 5 dimensions that truly make your company resilient.
Read the articleMedium-sized companies need security leadership but cannot afford a full-time CISO. This is how CISO-as-a-Service works in practice.
Read the articleMore than two-thirds of AI projects do not deliver the expected ROI. Here you'll learn why and how to do it differently.
Read the articleYour security is only as strong as your weakest supplier. SolarWinds, MOVEit, Log4j - learn here how to manage your supplier risk.
Read the articleOutsourcing seems cheaper - until you add everything up. Discover here what in-house and outsourcing actually cost.
Read the articleVendor lock-in costs you money, flexibility, and bargaining power. Find out here how to identify lock-in, and how to get out.
Read the articleLegacy systems cost more than you think. Here, you'll find out when you should migrate, replace, or keep them, and how to make the right decision.
Read the article30% of your SaaS costs are probably wasted. Here’s where the money is leaking, and how you can recover it.
Read the articleA wrong MSP can cost you years of frustration. Learn how to find the right one - and which warning signs should immediately make you move on.
Read the articleMost companies do not know which processes are truly critical to their business. A Business Impact Analysis provides clarity – here is the practical introduction.
Read the articleNIS2 Directive Switzerland: Practical implementation guide for Swiss companies. Requirements, deadlines, penalties, and implementation roadmap. Learn more now.
Read the article70% of all IT projects miss the budget, deadline, or scope. Learn here why - and how you can be among the successful 30%.
Read the article30% of your cloud costs are probably wasted. Here are 7 strategies to save immediately without sacrificing performance.
Read the articleAs a Swiss company, do you think GDPR doesn't affect you? That's incorrect. Here you will learn what digital sovereignty means, and why it protects your business.
Read the articleIdentity-based security or network security? Discover why you don't have to choose between them and how modern IT architectures combine both approaches to provide genuine protection.
Read the articleIs it cheaper to recover from a ransomware attack or to rebuild? We explain the true costs, risks, and decision criteria, and why the seemingly cheaper option often turns out to be the most expensive.
Read the articleLearn about the 7 strategic changes for modern network security that treat every access request as untrusted. Discover why traditional perimeter security fails and how to build resilience in cloud-first environments.
Read the articleApproaching Zero Trust Migration Strategically: A Practical Guide for a Step-by-Step Transition. Learn how to integrate legacy systems and avoid common mistakes – from practice for practice.
Read the articleDemystifying Zero Trust Architecture: What really lies behind the security concept? We'll dispel the myths and show you how to practically implement Zero Trust without replacing your entire network.
Read the articleLearn how to conduct effective cybersecurity risk analyses according to NIST 800-30. A practical guide to identifying threats, vulnerabilities, and protecting corporate assets.
Read the articleMany companies allocate their security budget using a scattergun approach. A bit of firewall here, some antivirus there... and then the attack hits exactly the system that keeps the business running. ...
Read the articleJaguar Land Rover lost hundreds of millions due to a cyber attack. What companies need to learn from this – and how they can truly protect themselves.
Read the articleIT excellence transforms IT from a cost center into an innovation engine. Learn how strategic IT transformation enhances business value and secures competitive advantages.
Read the article60-75% of all digitization projects fail. Not due to the technology – but due to five other factors. Here you will learn what they are.
Read the articleForget the AI hype. Gain practical insights into how artificial intelligence can truly enhance your business operations – no overnight miracles, just real results.
Read the articleRansomware recovery costs an average of 5.13 million dollars and 24 days of downtime. Discover how prepared companies can recover faster and more cost-effectively.
Read the articleCloud, remote work, and mobile-first approaches are making traditional security models obsolete. Discover perimeter-less cybersecurity strategies with Zero Trust.
Read the articleWe work with Swiss SMEs between 50 and 500 employees that need senior security expertise without creating a full-time position.
Read the answerSix services around information security: Interim & Fractional CISO, Security Management & Operations as consulting, ISMS setup and ISO 27001 certification, Security …
Read the answerWe take responsibility and stay until it is done.
Read the answerCompanies with 50 to 500 employees without a full-time CISO, firms in ISG-regulated sectors with an ISMS deadline by the end of 2026, SMEs that need ISO 27001 for …
Read the answerWe are practitioners, not pure consultants, with an implementation background.
Read the answerLarge firms are expensive and impersonal, classic boutiques swap people during a project.
Read the answerWhat matters most is trust on equal terms.
Read the answerWorkflows that repeat the same way every week and pull their data from two or three systems: the weekly report from ERP and accounting, the handover between sales and …
Read the answerWith us the prices are on the page: the Toolbox is free, the two hours cost CHF 750, the AI Builder starts at CHF 5'000 a month, cancellable monthly.
Read the answerIn many Swiss companies Microsoft Copilot is the pragmatic route, because it sits inside Microsoft 365 and the data stays there.
Read the answerYou tell us which work looks the same every week in your company.
Read the answerIn the two hours you see the difference on your own task.
Read the answerThree prices are on the page: the Toolbox is free, the two hours cost CHF 750, the retainer starts at CHF 5'000 a month and is cancellable monthly.
Read the answerOne named person with a time budget, as a guide four hours a week.
Read the answerNo, and we do not promise you job cuts either.
Read the answerThat is why there are two routes.
Read the answerYou do.
Read the answerIt will change.
Read the answerWith ODCUS AG, in the commercial register since 2022, registered office in Baar ZG, UID CHE-316.886.794.
Read the answerWe work with Swiss SMEs between 50 and 500 employees that need senior security expertise without creating a full-time position.
Read the answerSix services around information security: Interim & Fractional CISO, Security Management & Operations as consulting, ISMS and ISO 27001 certification, Security …
Read the answerWe take responsibility and stay until it is done.
Read the answerCompanies with 50 to 500 employees without a full-time CISO, firms in ISG-regulated sectors with an ISMS deadline by the end of 2026, SMEs that need ISO 27001 for …
Read the answerWe are practitioners, not pure consultants, with an implementation background.
Read the answerLarge firms are expensive and impersonal, classic boutiques swap people during a project.
Read the answerWhat matters most is trust on equal terms.
Read the answerCHF 750 for one person, CHF 3'900 as a half day with up to six managers.
Read the answerIn four steps.
Read the answerTen minutes and three questions: which task are you putting off?
Read the answerFour to five profile files in plain text that work in Claude, ChatGPT, Copilot and Langdock.
Read the answerBoth.
Read the answerBig enough that a difference shows, small enough for two runs: a report, a quote, a reply to a customer, minutes of a meeting.
Read the answerThe price comes out of your figures.
Read the answerFour weeks with a date: baseline, rethought, built and connected, measured.
Read the answerOne that repeats every week, costs people time today and pulls its data from two or three systems: weekly reports, handovers, quotes, collecting receipts, standard …
Read the answerThen we rework for up to four weeks, without an invoice.
Read the answerOne named person who knows the workflow today, with about four hours a week during the four weeks.
Read the answerThe workflow runs, the measurement is on the table, and you decide.
Read the answerFrom CHF 5'000 per month, cancellable monthly, with no hourly billing and no time quota.
Read the answerThey gather and maintain the context of your business, connect the systems, find, build and run the workflows, set guardrails, keep an eye on cost, bring new people …
Read the answerOne named person in-house, around four hours a week.
Read the answerTwo routes, decided in the first weeks: in-house with open models, without data leaving the building, or in the cloud with a Swiss contract and a data processing …
Read the answerYou keep everything: the company knowledge, the workflows, the profiles, the approval rules and the measurements, as readable files.
Read the answerWhen in doubt, “One less process”: four weeks with a date are easier to decide on than an open-ended monthly fee.
Read the answerThe IT security officer is often an internal person with limited time and experience.
Read the answerUsually within two to four weeks after the initial conversation.
Read the answerWe build things so that they keep running without us.
Read the answerUsually 1 to 2 days per week.
Read the answerIn our experience from around 50 employees, at the latest when a major customer, a cyber insurer, or the board requests proof of security.
Read the answerThe terms mean essentially the same thing: external security leadership on a mandate basis.
Read the answerWhen deciding and evidencing start slipping.
Read the answerManagement does, unchanged.
Read the answerThe CISO Retainer starts from CHF 4,900 per month, CISO Sparring from CHF 2,400 per month, both excluding VAT.
Read the answerA pentest looks for technical vulnerabilities in a defined scope.
Read the answerNo, that is the whole point.
Read the answerAround three weeks for the assessment, then two to four weeks for implementing the three most important measures.
Read the answerThe terms are often used synonymously.
Read the answerDepending on the goal, ISO 27001, NIST CSF, CIS Controls or the ISG requirements.
Read the answerYes, that is a frequent focus.
Read the answerA fixed price we name in the first conversation.
Read the answerFor an SME with 50 to 150 employees, typically six to twelve months to certification readiness, depending on the starting point and the team's availability.
Read the answerNo.
Read the answerThen we check what of it is effective and turn the paper tiger into a system that works in daily operations and is audit-ready, rather than starting from scratch.
Read the answerThe ISMS is the management system, that is processes, roles and controls.
Read the answerOperators of critical infrastructure: energy, health, finance, transport, drinking water, wastewater, telecommunications, food and public safety.
Read the answerUsually not.
Read the answerNo, that is the normal starting point.
Read the answerGood governance enables usage rather than preventing it.
Read the answerA lot.
Read the answerFor most SMEs not yet as a certificate, but as a structure.
Read the answerYes.
Read the answerThe law says "regularly" and sets no interval.
Read the answerFor ticking a box, perhaps.
Read the answerNo.
Read the answerOnly indirectly.
Read the answerWe recommend up to ten.
Read the answerWe quote after the intro call.
Read the answerGerman or English, on site across the German-speaking region or live online.
Read the answerSecurity leadership for Swiss industrial SMEs: answer customer questionnaires, clean up a grown toolset, bring OT and IT together. No new full-time position.
See the industryMeeting critical-infrastructure duties with SME resources: an ISMS along ISO 27001 and the Swiss ICT minimum standard, security spend you can justify.
See the industryMeeting regulator and custodian bank expectations with a team of five: named security responsibility, an ISMS as reusable evidence, and payment approvals that hold.
See the industrySecurity in a 24/7 operation, with medical devices that cannot be patched and a budget competing against equipment and staffing. At a predictable fixed price.
See the industryMany sites, high turnover, a grown cloud environment and margins with no room. One standard across every site instead of an island solution per store.
See the industryWhen the customer's security questionnaire decides the deal: a lean ISMS, ISO 27001 certification and rules for AI, without slowing the engineering team down.
See the industryProtect drawings, project data and client portals without creating an IT position. Security leadership for Swiss engineering and planning firms that want to win tenders.
See the industryProtect client data, professional confidentiality and payment runs without an in-house IT position. Security leadership for Swiss fiduciary firms from around ten employees.
See the industryProtect owners' funds, tenant data and monthly payment runs without an in-house IT position. Security leadership for Swiss property managers with 30 to 150 employees.
See the industryWe have not written about that yet. Ask us in the intro call, or write to us which term you are missing.
Next step
Tell us what you were looking for. If it belongs to our work, we will write it up.
