Security incidents require technical and legal decisions under time pressure. We support responsibility allocation, contractual safeguards, reporting assessments and claims against service providers.
How we help
- Security schedules, supplier requirements, patching, updates and incident response arrangements.
- Assessment of NIS2, the Cyber Resilience Act and sector-specific requirements.
- Reporting channels, evidence preservation, communications, personal data breaches and liability.
A practical example
An actively exploited vulnerability affects a connected product. Manufacturer status, product scope and reporting duties require immediate assessment alongside remediation, customer communications and evidence preservation.
What the assessment covers
We start with the intended outcome, the parties involved and the applicable territories. The next step is to examine the documents and evidence, identify deadlines and compare the available contractual or procedural options. The scope of work and fees are agreed before substantive work begins.
Documents for the first discussion
Incident timeline, affected systems and products, contracts, technical reports and notifications already made.
What if a deadline is already running?
Please give the exact deadline and send the relevant correspondence when making contact. Do not assume that an enquiry alone creates a retainer or that a deadline is being monitored.
Related services
Discuss your matter
Advice in German and English. Hannover is our head office; consultations are available across our German locations and remotely.