Assessment of status quo, development of recommendations for action and support for implementation of audit requirements (e.g. ISO27001, IEC 62443, or similar). This can include the preparation of the actual certification process.

Training and testing the employee's awareness against cyber attacks.

Ethical hacking to identify weaknesses in the IT landscape of a company, e.g. with penetration tests.