Cyber Risk & Resilience Assessment
Know your cyber risks. Strengthen your resilience.
A structured assessment that identifies cyber risks, evaluates your organization's resilience, and implements regulatory requirements in ways that hold up under scrutiny.
Decision-ready foundations instead of theoretical reports, for organizations with 50+ employees.
3 standalone modules
Bookable individually or as a full package
Bookable individually or as a full package
Fixed-price project
Includes workshops, reporting, and 30 days of advisory support
Includes workshops, reporting, and 30 days of advisory support
2–5 weeks per module
Depending on scope and modules booked
Depending on scope and modules booked
German & English
All deliverables in German or English, or both on request
All deliverables in German or English, or both on request
WHAT YOU GAIN
The value you gain
Not a theoretical report, but decision-ready foundations and plans you can act on.
01
Clarity, not guesswork
Prioritized risks instead of a gut feeling about where trouble might be brewing.
02
Regulatory requirements met
NIS2, DORA, and ISO 27001 mapped in a way that holds up, without your own compliance team.
03
A plan that works
Measures prioritized by effort-to-impact ratio, not a wish list.
04
Ready to act in a real incident
Tested emergency and recovery plans instead of improvising when it counts.
SCOPE
Three modules, individually or combined
Each module is a standalone, self-contained advisory engagement — and a building block toward the full picture.
MODULE A
Cyber Risk & Threat Landscape
Which threats pose the greatest risk to your organization, and what would an attack mean in practical terms?
✓Threat analysis & threat intelligence
✓External exposure analysis (OSINT)
✓Asset criticality mapping
✓Attack scenario development
✓Prioritized risk register
From €5,900
excl. VAT
MODULE B
Cybersecurity Maturity & Compliance Gap
How robust are your security measures against ISO 27001, NIST CSF, and NIS2, and where are the gaps?
✓Maturity assessment (ISO 27001, NIST CSF)
✓Governance & process analysis
✓NIS2 compliance gap analysis
✓Technical control assessment
✓Prioritized action plan
From €6,900
excl. VAT
MODULE C
Business Impact & Resilience Planning
What happens if a critical system fails, and how does your organization get back on its feet, in a structured way?
✓Business Impact Analysis (BIA)
✓RTO / RPO definition
✓Incident Response Plan (IRP)
✓Disaster Recovery Plan (DRP)
✓Crisis communication plan
From €8,500
excl. VAT
DELIVERABLES
What you receive
All results as standalone documents, in German or English — decision-ready for management and oversight bodies.
DELIVERABLE 01
Prioritized risk register
All identified risks with likelihood, impact, and priority.
DELIVERABLE 02
Cybersecurity maturity scorecard
Assessed against ISO 27001, NIST CSF, and BSI IT-Grundschutz.
DELIVERABLE 03
Business Impact Analysis
Critical processes, dependencies, and impact assessment per failure scenario.
DELIVERABLE 04
Incident response and recovery plans (IR & DR)
Tailored to your organization, operationally ready, not generic.
DELIVERABLE 05
Executive briefing & roadmap
Board-ready presentation of all results, without IT jargon.
DELIVERABLE 06
30 days of advisory support
For follow-up questions, prioritization decisions, and first implementation steps after project completion.
WHY TEUTOSEC
Cybersecurity leadership
that speaks your language.
Technical depth meets business thinking
Cybersecurity only delivers value once it's understood as a business risk. We think in both dimensions at once: technical substance and business consequence.
The true cost of a cyber incident
Years in the industrial cyber insurance industry showed us: the real cost of an incident is rarely where you'd expect. This knowledge shapes which measures we recommend.
At home in two worlds
Experience across NATO operations, European finance, and international insurance, paired with a deep understanding of small and medium-sized businesses.
Advice that serves your interests
No product recommendations, no vendor lock-in. Our recommendations are guided solely by your business and operational priorities.
Sebastian Hess
Co-Founder & Managing Director, TeutoSec | Cybersecurity and Cyber Risk Expert
Sebastian Hess combines more than two decades of operational and strategic cybersecurity experience with commercial thinking and executive-level governance, a combination rarely found in the market.
From NATO cyber operations, through CISO responsibility in the Belgian financial sector, to years in the industrial cyber insurance industry, where he assessed the real financial consequences of incidents for a wide range of companies.
With experience across the US, Europe, LATAM, and APAC, Sebastian Hess is equally at home in English- and German-speaking business environments, an advantage for small and medium-sized businesses with international operations or international owners.
Bundeswehr / NATO
CISO Financial Sector
Cyber Insurance
US · Europe · APAC
ISO 27001
NIST CSF
NIS2 · DORA
TARGET AUDIENCE
Who is the Assessment for?
SITUATIONS — FOR ORGANIZATIONS THAT …
are preparing for NIS2, DORA, or ISO 27001
need more clarity on cybersecurity maturity and operational risk
want to concretely strengthen incident response and recovery capabilities
are preparing for audits, due diligence, or regulatory reviews
expect actionable recommendations rather than theoretical concepts
are looking for an independent, business-oriented assessment
OUR INDUSTRIES
Manufacturing & Industry
Energy & Utilities
Logistics & Transportation
Healthcare
Financial Services
Technology & IT
Looking for ongoing support instead of a one-time project? Our Virtual CISO service continues to lead your cybersecurity on an ongoing basis.
Engineered Cybersecurity. Made in Germany.
SCOPE & INVESTMENT
Transparent. Predictable. Fixed price.
In a free initial consultation, we identify your needs and recommend the right module combination, followed by a binding fixed-price quote.
| Individual module (A, B, or C) | From €5,900excl. VAT |
| Full package, 50–150 employees | From €19,900excl. VAT |
| Full package, 150–300 employees | From €29,900excl. VAT |
| Full package, 300–500+ employees | From €44,900excl. VAT |