Provision of IT security operational services, including: - IT security incident handling - Technical IT security assessments - Design of system hardening measures - Threat and attack detection - Delivery of training sessions, including Splunk training — Provision of expert services for the maintenance and further development of Information Security Management Systems (ISMS) in accordance with the IT Security Catalog, including: - Improvement and Maintenance of asset inventories - Consultancy on Risk and gap analyses for systems based on ISO/IEC 27001, ISO/IEC 27019, and the IT Security Catalog — Provision of architectural security services, including: - Design of secure IT system architectures - Analysis and design of technical and organizational security controls - Coordination of the implementation of defined security measures — Provision of penetration testing services, including: - Execution of penetration tests in IT and hybrid IT/OT environments - Auditing of systems against documentation baselines and industry guidelines - Identification of risks and definition of appropriate treatment strategies