Cyber Security

Protection against cyber threats

Whether industrial companies, public institutions, or private individuals: cybersecurity has long since become an indispensable part of everyday life. Tested by TÜV NORD.

Cyber Security – Protection in a digitalized world

Cyber attacks on companies, government organisations and private individuals show how vulnerable modern information technology systems are. A lack of IT security in computer systems, applications and devices jeopardises data protection, operational processes and sensitive infrastructures.

TÜV NORD provides support in implementing, testing and maintaining cyber security. How do we do this? We identify risks at an early stage and minimise them through tested protective measures. We also ensure the best possible protection against cyber attacks: With independent audits according to recognised standards, certifications and webinars.

We rely on independently audited IT security, strengthen trust and protect processes, data and companies alike.

Cyber-Security: Our services

C-ITS

TÜV NORD offers comprehensive support for the testing and certification of C-ITS solutions to ensure IT security in vehicle networking. Our services ensure compliance with the European Commission's security requirements for trustworthy Car2X communication.

Certification of security requirements in accordance with IEC 62443-2-1 and -2-4

The IEC 62443 standard provides an internationally recognized standard for network security in the process and automation industry, which is increasingly used in Industry 4.0. It helps prevent cyberattacks and serves as proof of due diligence in accordance with the Industrial Safety Regulation and Product Safety Act.

D To top

Document management systems: Examination & certification PK-DML

TÜV NORD offers testing and certification of document management systems (DML) to ensure audit-proof archiving. We examine technical and organizational aspects to meet legal requirements such as unalterable archiving and process traceability.

E To top

eID, trust services & PKI – testing & certification

TÜV NORD offers testing and certification for trust service providers (TSPs) in accordance with the eIDAS Regulation, ETSI, and CEN standards. These services ensure compliance with legal requirements and enable inclusion in the EU Trusted Service List.

eIDAS (electronic registration and delivery services)

TÜV NORD supports providers of electronic registration and delivery services in achieving eIDAS compliance in order to be listed on the EU Trusted List. We offer preliminary tests, conformity assessments, and recertifications, as well as workshops and training courses on eIDAS and ETSI to meet the requirements of the eIDAS Regulation and national laws.

eIDAS (electronic seals)

TÜV NORD supports trust service providers for electronic seals in complying with the eIDAS Regulation in order to be included in the EU Trusted List. We offer testing, conformity assessments, and recertification, as well as workshops and eIDAS.PROFESSIONAL training courses to ensure optimal implementation of the legally required requirements.

eIDAS (electronic time stamps)

TÜV NORD supports qualified trust service providers in ensuring the legal certainty of documents through electronic time stamps. We offer audits, conformity assessments, and recertifications to enable inclusion in the EU Trusted List. Workshops and eIDAS.PROFESSIONAL training courses provide optimal preparation for certification.

eIDAS (remote signatures and seals)

TÜV NORD supports providers of remote signatures and seals in complying with the eIDAS Regulation in order to be listed as a qualified trust service provider. We offer comprehensive testing, conformity assessments, and recertification, as well as workshops and eIDAS.PROFESSIONAL training courses to make paperless signature processes secure and user-friendly.

eIDAS (trust service components)

TÜV NORD supports you in ensuring the eIDAS compliance of your trust service component by conducting tests in accordance with eIDAS and ETSI, preparing a compliance report, and assisting with certification. We help you set up a secure IT infrastructure and offer workshops and eIDAS.PROFESSIONAL training courses for comprehensive insights.

eIDAS.PROFESSIONAL Training

The eIDAS.PROFESSIONAL training course from TÜV NORD provides comprehensive knowledge of the eIDAS Regulation 910/2014, ETSI standards, and trust services. It optimally prepares participants for the examination aspects of the eIDAS conformity assessment.

Electronic archives & storage services: Auditing & certification of your trust service

TÜV NORD supports qualified trust service providers in the long-term storage of signed documents in accordance with the eIDAS Regulation. We offer testing and conformity assessments to ensure the legal validity of signatures and seals and enable inclusion in the EU Trusted List. Recertifications verify compliance with current standards and laws.

Electronic identification (eID): The basis for trustworthy communication

TÜV NORD supports identity providers in complying with the eIDAS Regulation for electronic identification solutions. We offer workshops to prepare for audits and notification, perform GAP analyses for security assessment, and certify the achieved security level after document review and audit.

ENX Vehicle Cybersecurity

The ENX Association's Vehicle Cybersecurity (VCS) audit program focuses on standardized audits for cybersecurity management systems in the automotive sector, based on ISO/PAS 5112 and ISO/SAE 21434, and offers certification via the ENX platform upon successful testing by providers such as TÜV NORD.

I To top

IEC 62351 - Cyber security for energy networks

International Approvals & FCC CAB

ISO 20000-1

ISO 20000-1 certification confirms that a company can effectively plan, implement, and improve IT processes and meets international standards for a service management system (SMS), which ensures reliability, functionality, and security in IT-supported supply chains.

ISO 27001 Certification

The ISO/IEC 27001 standard defines criteria for an effective information security management system (ISMS) that ensures the confidentiality, integrity, and availability of data. TÜV NORD offers customized audits for certification to ensure trust and continuous improvement.

ISO 27701 Certification

ISO 27701 extends ISO 27001 to include data protection aspects by ensuring the privacy of others is protected. TÜV NORD has been accredited since 2022 to certify companies to both ISO 27001 and ISO 27701 and offers comprehensive information security and data protection solutions.

ISO/IEC 42001

The international standard ISO/IEC 42001 defines the requirements for a management system for artificial intelligence. It supports organizations in operating AI applications in a structured, responsible, and legally compliant manner.

ISO/SAE 21434 Certification

The ISO/SAE 21434 standard addresses cybersecurity in the automotive industry by defining process-oriented security requirements for electrical and electronic systems throughout the entire vehicle lifecycle to ensure protection against cyberattacks.

IT security catalog in accordance with Section 11 (1a) of the Energy Industry Act - NEW § 5c

As part of critical infrastructure, the energy sector must introduce and certify an ISMS in accordance with ISO 27001, as stipulated in the IT security catalog of the Federal Network Agency (BNetzA). TÜV NORD offers support and certification to ensure the security and reliability of networks.

IT security catalog in accordance with Section 11 (1b) of the Energy Industry Act - NEW § 5c EnWG

Energy generation plants must take security measures against threats to ICT in accordance with Section 11 (1b) of the German Energy Industry Act (EnWG). The expanded IT security catalog of the Federal Network Agency (BNetzA) requires certification by accredited bodies such as TÜV NORD to ensure secure network operation.

IT security railway technology

Digitalisation in rail transport requires high IT security standards. TÜV NORD supports manufacturers and operators with testing and certification in accordance with international standards such as IEC 62443 - for safe and reliable railway operations.

K To top

KRITIS and the IT Security Act

The IT Security Act 2.0 extends the protection of critical infrastructures (KRITIS) to include municipal waste disposal and companies of particular public interest. It lowers thresholds to oblige more organizations to increase their IT security, especially those that serve more than 500,000 people.

Q To top

QSCD

TÜV NORD offers comprehensive support for the testing and certification of qualified signature and seal creation devices (QSCDs) in accordance with the eIDAS Regulation. As an accredited and designated body, we carry out security assessments in accordance with Common Criteria or our own processes to enable inclusion in the EU list of certified QSCDs.

Qualified Website Certificates & Authentication: Verification & Certification of Your Trust Service

TÜV NORD supports the establishment of a qualified trust service for website authentication in accordance with the eIDAS Regulation. We offer testing, conformity assessments, and recertification, as well as workshops and eIDAS.PROFESSIONAL training courses. Strengthen your customers' trust with tested certificates and the highest security standards.

R To top

Radio Tests

S To top

Sector Coupling: Inspection, Testing and Certification of Integrated Energy Systems

The energy transition requires the intelligent integration of electricity, heat, mobility and industry. TÜV NORD supports the secure and efficient interconnection of energy systems – from feasibility studies and project support to certification and commissioning.

Security for networked products in the Smart Home

V To top

Validation services for electronic signatures, seals, and time stamps: verification and certification of your trust service

TÜV NORD supports trust service providers for validation services in complying with the eIDAS Regulation in order to be included in the EU Trusted List. We offer preliminary assessments, conformity assessments, and recertifications, as well as workshops and eIDAS.PROFESSIONAL training courses to ensure that paperless documentation is secure and compliant.

quantum key distribution - green on black

TÜVIT

Shaping digitalization securely

"IT security forms the backbone of successful digitalisation. We are convinced of this. As a knowledge company, we pave the way for this and provide a neutral view of the effectiveness of implementation. This builds trust."

Dirk Kretzschmar
CEO TÜVIT

About TÜVIT

Cyber Security

Cyber Security – Protection in a digitalized world

Cyber-Security: Our services

Shaping digitalization securely

Interesting facts about Cyber Security