Zentric

Cybersecurity & Privacy

Since 1999

Threat analysis, vulnerability management, and incident response
For over 20 years, Zentric has been providing flexible and straightforward support in threat analysis, vulnerability management, and the assessment and handling of security incidents, including forensic analysis and coordination in the event of security breaches.

Security Incident?

In the event of an IT security incident, you need swift support.
Time is a critical factor, and quick action is essential.
Call us or send an email via Bell.
   

Services

... as a Service

Digital Forensics

We offer comprehensive digital forensics services to investigate and analyze security incidents. Our experts use advanced and conventional techniques to secure digital evidence, helping you understand the extent of attacks and protect your systems against future threats.

Examples of our services include:
- Data recovery and analysis: Examining data to uncover security incidents, including the identification and securing of digital evidence.
- Incident reconstruction: Tracing the sequence of an attack using Attack Tree Analysis.
- Malware analysis: Investigating malware and developing countermeasures.
- Network forensics: Analyzing network traffic to detect suspicious activities.
- Impact assessment of security breaches: Evaluating the consequences of security incidents.
- Recommendations for improving security posture: Providing tailored suggestions to enhance your protection.

Forensic-as-a-Service (FaaS)
Our FaaS offering allows you to purchase predefined service quotas or establish cost agreements, enabling you to manage incident response costs effectively and scalably. In the event of a security incident, you can activate the required service package on demand. For example, we provide data recovery and analysis of assets in cases of suspected criminal activities within your organization, with a fixed price for 3 days of service per PC, laptop, or smartphone.

Incident Handling and Vulnerability Management

We support you in building robust frameworks for incident handling and vulnerability management. Our approach ensures that your organization can effectively identify, respond to, and mitigate threats to minimize potential damage and downtime.

Cyber Security Risk Management

"Zentric's support was indispensable in our incident management. Their team acted quickly and effectively, providing valuable insights that helped us understand the incident and significantly improve our security measures. Their professionalism and expertise were incredibly helpful during a critical situation."

Incident Response Process

Threat Identification
We help you identify potential threats early by continuously monitoring your systems and their peripherals for vulnerabilities.
Example: Regular checks of your components for vulnerabilities increase the likelihood of discovering and fixing these issues in your software components before attackers can exploit them. Unpatched vulnerabilities are akin to a wide-open handbag with a visible wallet.


Response Strategies
We develop customized response plans (Incident Response Plan) to ensure your organization can respond to security incidents quickly and efficiently.
Example: In the event of a data breach, you will have immediate access to a well-defined plan that includes steps for containment, investigation, and notifying affected parties. There is no time during an event to create or debate such plans.


Risk Mitigation
By implementing proven processes and practices, you can reduce the likelihood of incidents and minimize damage to your components in the event of a security breach.
Example: Introducing two-factor authentication or encryption in the right places can significantly reduce the risk of unauthorized access.


Training and Awareness
We offer training for your staff to enhance their awareness of security threats and equip them with the skills to handle them practically.
Example: Regular training and exercises on handling attacks reduce the likelihood of a successful breach by attackers.


Incident Analysis and Forensics
In the event of a security incident, we assist with forensic coordination and analysis to identify the cause of the incident and prevent future attacks. This includes managing attackers, authorities, and legal counsel.
Example: After a cyberattack, our experts analyze the traces of the attack to understand how the attacker gained access to the system and what measures are necessary to prevent similar incidents in the future.

Standards, Frameworks, and Best Practices
We rely on established standards when planning and implementing new processes. For Incident Response and Vulnerability Handling, the following are particularly relevant:

Incident Handling

ISO/IEC 27035
A comprehensive guide for managing information security incidents, covering planning, preparation, detection, reporting, assessment, decision-making, response, and learning processes.

NIST Special Publication 800-61
A detailed guide from the National Institute of Standards and Technology (NIST) that outlines the process of incident handling in the U.S., including preparation, detection, analysis, containment, eradication, recovery, and post-incident activity.

SANS Incident Handler’s Handbook
Provides practical guidance and best practices for incident handling, covering all phases from preparation to post-incident activity.

FIRST (Forum of Incident Response and Security Teams) Best Practices
Offers global best practices and guidelines for incident response teams, promoting collaboration and information sharing between teams.


Vulnerability Handling

NIST SP 800-216
This publication provides recommendations for establishing a federal vulnerability disclosure framework, emphasizing a structured process for receiving, confirming, analyzing, and addressing vulnerability reports.


ISO/IEC 30111:2019
Guidelines for handling and resolving reported potential vulnerabilities in products or services, aimed at vendors managing vulnerabilities.


ISO/IEC 29147:2018
Focuses on vulnerability disclosure, ensuring effective and secure communication of vulnerabilities between involved parties.


OWASP Vulnerability Management Guide (VMG)
A comprehensive guide to setting up an effective vulnerability management program, covering the entire lifecycle from preparation to remediation.


OWASP Vulnerability Management Center (VMC)
Provides extensive resources for managing vulnerabilities systematically and efficiently, including detection, prioritization, remediation, and reporting.

Cyber Security Risk Management

All security efforts stem from our concern about threats to our integrity. Insecurity implies vulnerability. How severe is this threat? How likely is it? Can we recognize it as it emerges? Are we capable of accurately assessing the potential damage, and what can we do to mitigate the threat and resulting risks? Ensuring security always involves identifying, evaluating, and somehow managing risks.

Standards, Frameworks, and Best Practices

ISO/IEC 27005
This standard provides guidelines for information security risk management and is an integral part of the ISO/IEC 27001 standard for Information Security Management Systems (ISMS). It supports organizations in conducting risk assessments within the context of their information security objectives.

NIST Risk Management Framework (RMF)
The NIST RMF integrates security and privacy risk management into the system development lifecycle. It encompasses steps such as preparation, categorization, selection, implementation, assessment, authorization, and continuous monitoring.

Why Is It Important?
In today’s digital economy, security vulnerabilities can have significant financial and operational impacts. A thorough Cybersecurity

Due Diligence Assessment helps companies:
- Identify and mitigate risks: Detect security gaps early that could threaten business continuity and reputation.
- Preserve and enhance value: Ensure the target company or product meets security standards to protect potential investments.
- Ensure regulatory compliance: Confirm adherence to relevant legal and regulatory requirements to avoid legal and financial consequences.

Incident Response Exercises

In today’s digital world, cyberattacks are a constant threat to organizations of all sizes and industries. To ensure your team is optimally prepared for such attacks, we offer tailored Cybersecurity Incident Response Exercises. These exercises are specifically designed to meet the needs of your organization and simulate real-world attack scenarios. We help your team practice and refine response strategies to enhance overall readiness and resilience.


What We Offer

Planning and Coordination
Our experts design and coordinate comprehensive Incident Response Exercises tailored to your specific requirements and risks. We take into account your existing security policies, infrastructure, and potential threats.

Realistic Scenarios: 
We simulate a wide range of realistic attack scenarios covering various types of cyber threats, including phishing attacks, ransomware, insider threats, and Advanced Persistent Threats (APTs).

Comprehensive Injects and Techniques:
Our exercises include a broad range of injects and techniques to test different aspects of your incident response capabilities. These encompass technical challenges, communication demands, and organizational response processes.

Evaluation and Feedback:
Following each exercise, we provide a comprehensive evaluation and detailed feedback. This includes assessing detection and response speed, the effectiveness of measures, and communication within the team.


Evaluation Criteria
To measure the effectiveness and efficiency of your incident response capabilities, we use a structured methodology based on the following criteria:

- Detection and Identification: Speed and accuracy in identifying and detecting incidents. 
- Analysis and Assessment: Thoroughness and accuracy of incident analysis and documentation. 
- Response and Containment: Speed and effectiveness of response and containment measures, as well as internal and external coordination. 
- Remediation and Recovery: Completeness of remediation, speed of recovery, and verification of actions. 
- Communication: Effectiveness of internal and external communication, and transparency with stakeholders. 
- Lessons and Improvements: Insights gained from incidents and implementation of improvements to strengthen security. 
- Adherence to Policies and Protocols: Compliance with internal and external security policies and regulatory requirements. 
- Technical Aspects: Use of appropriate tools and technologies, and application of technical expertise. 


Your Benefits

Through our tailored Incident Response Exercises, your organization’s ability to respond to and recover from cyber threats will significantly improve. Your team will be equipped to react faster and more effectively to attacks, mitigate damage, and ensure business continuity.

Contact us today to learn more about how our Incident Response Exercises can strengthen your security posture.

Vulnerability Handling as a Service (VHaaS)

In today's more digitally organized world, security vulnerabilities pose a constant threat to organizations of all sizes and industries. To ensure your IT systems are optimally protected, we offer tailored Vulnerability Handling as a Service (VHaaS). This service is specifically designed to meet your organization's needs, helping you proactively identify, prioritize, and remediate vulnerabilities in your systems. This enhances your overall security posture and resilience against cyberattacks.

What We Offer:

• Planning and Coordination: Our experts plan and coordinate comprehensive vulnerability management processes tailored to your specific requirements and risks. We consider your existing security policies, infrastructure, and potential threats.
• Regular Scans and Detection: We conduct continuous scans of your systems, networks, and applications to identify vulnerabilities early.
• Risk-Based Prioritization: Our experts assess vulnerabilities based on their risk to your business, ensuring the most critical threats are addressed first.
• Automated Processes and Tools: We utilize advanced automation and AI to streamline the process and minimize human error.
• Remediation and Monitoring: We assist in remediating vulnerabilities and continuously monitor your systems to ensure new vulnerabilities are detected promptly.

Evaluation Criteria:

To assess the effectiveness and efficiency of your vulnerability management, we use a structured methodology based on the following criteria:

• Detection and Identification: Speed and accuracy in detecting vulnerabilities in your systems.
• Prioritization and Risk Assessment: Thoroughness of risk assessment and prioritization of vulnerabilities based on their criticality.
• Response and Containment: Speed and effectiveness of remediation measures and coordination with your internal teams.
• Monitoring and Reporting: Continuous monitoring of systems and transparent reporting on the status of vulnerabilities.
• Compliance with Policies: Ensuring all measures comply with internal and external security standards.
• Technical Aspects: Use of state-of-the-art tools and technologies, along with the application of current cybersecurity expertise.

Your Advantage:

With our tailored Vulnerability Handling as a Service, you improve your organization’s security and resilience against cyber threats. Your business will be able to proactively identify and remediate vulnerabilities before they can be exploited, ensuring the continuity of your operations.

Contact us today to learn more about how our vulnerability management can strengthen your security posture.

Introduction of Cybersecurity Standards in Key Industries

We specialize in the implementation of cybersecurity standards across various industries, ensuring your organization adheres to the highest security standards and complies with industry regulations:

Semiconductors
ISO/IEC 27001: An internationally recognized standard for Information Security Management Systems (ISMS), providing a systematic approach to protecting sensitive information.
IEC 62443: A globally acknowledged standard focusing on the cybersecurity of Industrial Automation and Control Systems (IACS), offering best practices for safeguarding critical infrastructure and industrial facilities.
ISO/IEC 15408 (Common Criteria): An international standard for evaluating the security features of IT products. It provides a framework for assessing and certifying IT systems and products to ensure they meet specific security requirements.


Automotive
ISO/SAE 21434: An international standard defining cybersecurity management requirements for the automotive industry, offering guidelines for the entire vehicle lifecycle.
ISO 26262: A standard focused on the functional safety of road vehicles, addressing electronic and electrical systems.
TISAX (Trusted Information Security Assessment Exchange): A standardized approach to information security assessments tailored for the automotive industry.


Healthcare
HIPAA (Health Insurance Portability and Accountability Act): U.S. legislation providing data privacy and security provisions for safeguarding medical information.
ISO/IEC 27799: A standard offering guidelines for information security management in healthcare organizations.
IEC 62304: A standard focusing on the lifecycle requirements for medical device software.


Civil Aviation
DO-326A/ED-202A, DO-356A/ED-203A, DO-355A/ED-204A: Standards addressing cybersecurity in aviation, including airworthiness and operational considerations.
ISO/IEC 27001: Applied in aviation to protect sensitive data and ensure robust information security practices.


Railway
TS 50701: A cybersecurity standard tailored for the railway sector, addressing threats in connected systems.
IEC 62443: Extending its application to railway automation and control systems for enhanced security.
ISO/IEC 27001: Ensuring secure information management in the railway industry.

By leveraging these standards, we enable organizations to enhance their cybersecurity posture, meet regulatory demands, and protect critical assets effectively.

The constantly evolving challenges in IT security make it nearly impossible for IT staff to stay up to date at all times. Zentric bridges these service gaps with our consulting and service offerings. Our services include:

- Cyber OPFOR Coordination
- Data Leakage Prevention
- Audit Support/Training
- Governance Services
- Digital/Computer Forensics
- Selection and Evaluation of Security Equipment and Software

Excerpt from Our Service Packages

Due Diligence

Cybersecurity Due Diligence: What is a Cybersecurity Due Diligence Assessment and How Does It Work?
In today’s digital world, cybersecurity is increasingly central to the success and survival of businesses. Especially during acquisitions or investments in other companies, a key question often arises: How secure is the IT infrastructure and data of the target company? A Cybersecurity Due Diligence Assessment is the process that answers these questions.

Cyber Security Risk Management

All security efforts stem from our concern for the threat to our integrity. Uncertainty means vulnerability. How severe is this threat? How likely is it? Can we recognize it when it emerges? Are we able to accurately assess the potential damage, and what actions can we take to address the threat and the resulting risks? Ensuring security always means identifying, evaluating, and somehow managing risks.

Standards, Frameworks, and Best Practices
ISO/IEC 27005:
This standard provides guidelines for information security risk management and is an integral part of the ISO/IEC 27001 standard for Information Security Management Systems (ISMS). It supports organizations in conducting risk assessments in the context of their information security objectives. Further details can be found here.


NIST Risk Management Framework (RMF)
The RMF standard by NIST integrates security and privacy risk management into the system development lifecycle. It includes the steps of preparation, categorization, selection, implementation, assessment, authorization, and continuous monitoring. Learn more here.

Datenschutzerklärung

Datenschutz

Preface
If you do not wish for your current IP address to be stored here or by other software library providers associated with us, please leave this page or refrain from using internet browsers, email clients, or other internet tools. Upon entering a web address (DNS name), and even before accessing our or any other website, your IP address will be shared with DNS servers, routers, and potentially search engines, where it may be stored and managed temporarily.

1. Name and Contact Details of the Data Protection Officer
The role of a Data Protection Officer is not mandatory at Zentric. The contact person is Mr. Chris Ditze-Stephan.

2. Collection and Storage of Personal Data and Their Usage
a) Visiting the Website
When accessing our website, www.zentric.*, information is automatically sent by the browser used on your device to our website's server. This information is temporarily stored in a log file and includes:

IP address of the requesting computer
Date and time of access
The website from which the access occurred
Name and URL of the accessed page
Browser used and, where applicable, the operating system of your computer and the DNS name of your internet provider

These data are processed for the following purposes:

Required for the operation of the HTTPS protocol
Analysis for system security and stability when necessary
Administrative purposes, such as blocking attacker IP addresses during incidents

The legal basis for processing this data is Article 6(1) of the GDPR. Our legitimate interest arises from the purposes listed above. Under no circumstances do we use the logged data to draw conclusions about you personally.
b) Contact Form Use
When using our contact form, providing your name and email address is required for us to respond. Additional details are optional. The data processing for contacting us is based on Article 6(1) of the GDPR and your voluntary consent. Data collected via the contact form is automatically or manually deleted after your inquiry has been addressed.
You may also contact us via email or phone.

3. Data Sharing
Personal data collected through the contact form will not be shared with third parties, except for purposes explicitly outlined here.

4. Cookies
Cookies may be indirectly used via libraries integrated into our website.

Cookies store information related to the device in use. Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored or to alert you before a new cookie is created. Disabling cookies entirely may result in limited website functionality.

7. Rights of the Data Subject
You have the following rights:

Right to Access: Request information about your processed personal data (Article 15 GDPR).
Right to Rectification: Request the correction of inaccurate or incomplete data (Article 16 GDPR).
Right to Erasure: Request deletion of your personal data, provided there is no legal or legitimate requirement for retention (Article 17 GDPR).
Right to Restriction: Request the limitation of data processing under certain conditions (Article 18 GDPR).
Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format (Article 20 GDPR).
Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR).
Right to Lodge a Complaint: File a complaint with a supervisory authority (Article 77 GDPR).

For exercising these rights, email us at: datenschutzbeauftragter@zentric.de

8. Right to Object
Under Article 21 GDPR, you may object to data processing based on legitimate interests, provided there are reasons relating to your particular situation. Objections to direct marketing are unrestricted.

9. Data Security
We use TLS encryption with the highest level supported by your browser, generally 256-bit encryption. For unsupported browsers, 128-bit v3 technology is used. This encryption will be further strengthened as technology evolves.

10. Cloudflare
We use Cloudflare's CDN for performance and security. Your data, including your IP address, may be processed worldwide. For details, refer to Cloudflare's privacy policy.

11. Twitter Integration
Our website integrates Twitter functionalities, governed by Twitter's Privacy Policy.

12. Google CDN
We use Google’s CDN for jQuery to enhance website loading speeds. Data shared during such requests may be transferred to the USA under Google’s policies.

13. Updates
This policy is effective as of May 2018 and may be updated to reflect changes in laws or services.