SE Tylose GmbH & Co. KG – NIS2 check at SE Tylose: systematic safety testing.

For SE Tylose, cyber security is more than just an IT issue. Production facilities, supply chains, HR processes – everything depends on secure and functioning systems. In view of the new NIS2 Directive, the company wanted to know: Where do we stand today? Which areas are already well positioned? And where are there gaps? The EU's NIS2 Directive requires companies in critical industries to strengthen their cyber resilience. However, even before the directive came into force, SE Tylose knew that the first step was to conduct a complete inventory of all relevant processes, guidelines and technical measures – from firewalls to supplier evaluations. This is the only way to achieve NIS2 compliance in a targeted and timely manner.

SE Tylose relied on Bechtle's advice, as the company impressed with its expertise in IT security. The process began with a kick-off workshop involving all relevant managers. Together, they defined the scope of the compliance audit: Which departments would be included? Which interviews would be necessary? Within a few days, the process was finalised. This was followed by an on-site maturity assessment. Bechtle conducted interviews in various departments and examined how security guidelines are implemented in everyday work.

All processes – from the firewall concept and smartphone use to supplier evaluation – were systematically recorded. Each finding was documented and deviations were clearly marked as major or minor issues. This formed the basis for a comprehensive audit report: with a summary of all strengths, a transparent GAP analysis and clearly prioritised recommendations for action. Bechtle went through this report point by point with SE Tylose, explaining how the identified gaps could be closed. The result: a complete, structured overview of information security at SE Tylose and a precise roadmap for meeting all the resulting requirements before the NIS2 Directive comes into force.