SERVICES
Three paths to greater cyber resilience
From your initial risk assessment, through ongoing leadership, to immediate on-site management, select a service below for comprehensive details, scope, and pricing.
01 / Assessment
Cyber Risk & Resilience
Assessment
Know your cyber risks. Strengthen your resilience.
A structured assessment across five interlocking areas, from the first risk picture to a board-ready report. Decision-ready foundations, not a theoretical study.
View service
✓Fixed-price project, completed in 4 to 6 weeks
✓Risk register, BIA, and IR/DR plans
✓From €19,900, tiered by company size
02 / Laufend
Virtual CISO
Strategic cybersecurity leadership, without a full-time CISO.
TeutoSec takes on the strategic cybersecurity leadership of your organization: structured, continuous, and aligned with your business goals. Three scalable packages. Month-to-month. Cancel anytime.
View service
✓Essential, Advanced, Premium - Monthly cancelation
✓Ongoing alignment with NIS2, DORA, and ISO 27001
✓From €1,800 per month
03 / Sofort
Transitional On-Site CISO
Leadership on the ground, operational from day one.
Some phases can't wait. TeutoSec takes on cybersecurity leadership directly within your organization. For organizations in transition, under regulatory pressure, or managing a cyber incident.
Vew service
✓Available immediately, no hiring delay
✓Stabilization, transformation, crisis response
✓Structured handover to your future CISO included
✓From €15,000 per month
WHAT YOU GAIN
The value you gain
Not a theoretical report, but decision-ready foundations and plans you can act on.
Clarity where there was uncertainty
You know where your most critical risks lie and how an incident could affect your company—eliminating guesswork and blind spots.
Regulatory requirements met, without your own compliance team
NIS2, DORA, ISO 27001, GDPR: structured and demonstrable, without permanently tying up internal resources.
A plan that works
Prioritized measures with realistic effort and impact estimates: immediately actionable, effective in the mid-term, resilient in the long term.
Capable of acting in a real incident, not reacting to one
Individually tailored Incident Response and Disaster Recovery plans: operational plans that hold up in a real incident, not a generic template.
WHY TEUTOSEC
We know what works —
and what doesn’t.
Technical depth meets business thinking
Cybersecurity only delivers value once it's understood as a business risk. We think in both dimensions at once: technical substance and business consequence.
The true cost of a cyber incident
Years in the industrial cyber insurance industry showed us where the real cost of an incident lies — and it's rarely where you'd expect. This knowledge shapes which measures we recommend.
At home in two worlds
Experience across NATO operations, European finance, and international insurance, paired with a deep understanding of small and medium-sized businesses.
Advice that serves your interests
No product recommendations, no vendor lock-in. Our recommendations are guided solely by your business and operational priorities.
Sebastian Hess
Co-Founder & Managing Director, TeutoSec | Cybersecurity and Cyber Risk Expert
Sebastian Hess, co-founder and managing partner of TeutoSec, brings more than 20 years of cybersecurity and cyber risk management experience across NATO, the German Armed Forces, and the international insurance industry to small and medium-sized businesses.br>
He combines operational and strategic cybersecurity experience with commercial thinking and executive-level governance — a combination rarely found in the market. His career spans NATO cyber operations, CISO responsibility in the Belgian financial sector, and several years in the international cyber insurance industry, where he assessed the real financial consequences of cyber incidents for a wide range of companies. With experience across the US, Europe, LATAM, and APAC, he is equally at home in English- and German-speaking business environments.
After finishing school, Sebastian chose an officer career and served in various IT leadership positions in Germany and the US from 2001 to 2008. In 2008 he joined NATO, initially leading part of the AWACS software development effort in Germany. In 2011 he was appointed Chief Theater Information Assurance Officer — the in-theater equivalent of a CISO — for the NATO mission in Afghanistan, responsible for securing the network in the field. From 2012 to 2015 he then led the build-out of NATO's Cyber Defense Capability across the alliance as Deployment Manager, based in Belgium.
In 2015 Sebastian moved into the private sector: as the first CISO of Isabel Group, Belgium's largest fintech company, he built the information security function from the ground up. From 2017 he led the build-out of the Cyber Risk Engineering & Consulting function across EMEA, APAC, and LATAM at AIG as Head of International Cyber Risk Advisory. In 2023 Sebastian joined the RiskPoint Group as Chief Cyber Risk Officer. In 2026 he founded TeutoSec to bring cybersecurity and cyber risk advisory — built on this experience from defense, NATO, and the international insurance industry — to small and medium-sized businesses.
Sebastian is a co-author of the German, European, and North American editions of the Cyber Risk Handbook for Corporate Directors. He holds a Master's in Computer Science from the Bundeswehr University Munich, a Master's in Executive Leadership from Georgetown University, and an LL.M. from KU Leuven, Belgium. He is a Certified Chief Information Security Officer (C|CISO) and a Certified Information Systems Security Professional (CISSP).
Engineered Cybersecurity. Made in Germany.
TARGET AUDIENCES
Who we work with
SITUATIONS — FOR ORGANIZATIONS THAT …
are preparing for NIS2, DORA, or ISO 27001
need more clarity on cybersecurity maturity and operational risk
want to concretely strengthen incident response and recovery capabilities
are preparing for audits, due diligence, or regulatory reviews
expect actionable recommendations rather than theoretical concepts
are looking for an independent, business-oriented assessment