ProSec Global
DE / EN Contact
The Group / Committees & Associations Committees & Associations

Security is not created by going it alone.

Where requirements for companies are discussed, the experience of those who later implement them belongs at the table. The ProSec Group is involved in associations, expert committees and networks: continuously, with a clear mandate and with the aim of bringing practice and rule-making closer together.

Our mandate

Contribute, don’t comment.

For us, association work is not a matter of representation. It is the place where it is decided whether security requirements hold up in practice. Three reasons why we invest time and experts in it.

Mission
Why we contribute.

Requirements emerge before they apply.

Rules for cybersecurity are prepared in expert committees and associations long before they reach companies. Whoever is involved there brings in the view of those who later have to implement the requirements. For a security company, that is part of the job.

Contribution
What we bring in.

Experience from real assessments and incidents.

Our contributions incorporate what is actually observed in security assessments, incidents and proof procedures. This perspective is rarely represented in rule-making. It helps to frame requirements so that they have an effect and remain achievable even without an in-house security department.

Return flow
What follows from this for companies.

Understanding requirements before they become binding.

Whoever is involved in the preparation knows the reasoning behind a rule and its room for interpretation. This knowledge reaches our advice for executive management: which requirements actually apply, which effort is appropriate and which developments are foreseeable.

Involvement

Where we are represented.

The group is represented where technical questions of cybersecurity are prepared, positions of the business community are coordinated, skilled professionals are qualified and regional digital projects are developed.

It is the group that is represented, not an individual person. Listed is which role we have in each case and with which contribution we are involved there.

Alliance for Cyber Security | ParticipantThe Alliance for Cyber Security is an initiative of the German Federal Office for Information Security (BSI) and brings authorities and business together in a shared situation picture. As a participant, we receive warnings and assessments from the BSI and, in return, feed back what we encounter in our testing practice.
Wirtschaftsrat der CDU e. V. | MemberThe Wirtschaftsrat is a business professional association that develops economic policy positions and introduces them into the political process. Membership is the basis of our work in its expert committees and provides access to the dialog between companies and decision-makers.
Federal Expert Commission on Cybersecurity of the Wirtschaftsrat der CDU | ContributorIn the Federal Expert Commission, the Wirtschaftsrat develops its positions on cybersecurity and digital policy; it is a body of the association and not a government institution. There we contribute the perspective of offensive testing: which paths attackers actually use and which requirements change anything about that.
Digital Committee of the German Chamber of Industry and Commerce | Committee memberIn the Digital Committee of the DIHK in Berlin, the chambers of industry and commerce coordinate their digital policy positions. Our contribution concerns the question of how security requirements remain viable for small and medium-sized enterprises, for which effort and proof weigh particularly heavily.
Digital Advisory Board Koblenz | InvolvementDigitalization is also decided in the regions: in administrations, schools and medium-sized businesses. At the group’s seat, we bring our view of security into regional projects and connect it with what is being prepared at federal level.
IHK Academy Koblenz | PartnerAs a partner of the IHK Academy, we contribute to the qualification of skilled professionals, among other things to the certificate course for Junior Penetration Tester (IHK). The shortage of security professionals cannot be solved by poaching, only by training. That is why we put testing knowledge into a chamber format that has an effect beyond our own workforce.
Regulatory initiatives

What we have contributed to.

Committee work results in position papers on initiatives that change requirements for companies. Named are initiatives in which the group was professionally involved.

Ministerial draft bill

IT Security Act 2.0

Through committee work in the Wirtschaftsrat, we were involved in the assessment of the ministerial draft bill. The focus was on the questions of which companies are actually affected, which proof remains proportionate and how the requirements can be met without an in-house security department.

Implementation act

NIS-2 in national law

We provided professional support and advice during the drafting of the German implementation act. The focus was on the assessment of who is affected by size and sector, the reach of the personal responsibility of executive management and the question of how requirements can be passed on along the supply chain without overburdening suppliers that have no security organization of their own.

ProSec Global

Involvement in committees is not a by-product of our work. It is part of the responsibility that comes with this task.

Whoever advises companies on security matters must be present where the rules by which they are judged are made. And must be willing to contribute their own experience there instead of keeping it for their own business.