IT security & data protection
Rights & roles
Everyone sees what they need and no more
What this is about
Permissions that have grown over time are a quiet risk: after years, almost everyone has access to almost everything. We build a role model that matches the business as it is today and stays auditable.
What is included
- Roles instead of individual personal rights
- Clear assignment of who gets which role
- Sensitive areas protected separately
- Documentation for audits
- Annual review of assignments
Process
How we go about it.
Survey
Who has access to what today?
Design
Form roles and assign them.
Switch
Step by step, without blocking work.
Review
Reconcile annually and keep a record.
Frequent questions
This is what we are often asked.
Does this lead to complaints?
Sometimes at first. That is why we switch over step by step and clarify needs beforehand.
How often should it be reviewed?
Once a year, and additionally whenever staff change.
Does it apply to management too?
Yes. Full access for everyone is rarely necessary, and particularly dangerous when something goes wrong.
Sollen wir uns das ansehen?
Ein kurzes Gespräch genügt, um einzuschätzen, was in Ihrem Betrieb sinnvoll ist — und was nicht.