Ein Bild von ITC Close Menu
Project Sourcing: IT and Regulatory People Development Cases Team FAQ German
Ein Bild von ITC
Project Sourcing: IT and Regulatory People Development
Open menu
Ein Bild von ITC

Project sourcing -
Get Projects Done.

Complex projects? Tight budgets and timelines? Lacking expertise? We provide the right experts and teams to drive your projects forward successfully. With passion and experience, we deliver results.

6800 Consulting Days
3800 Trainings and Coachings 2024

OUR CORE FOCUS AREAS

DORA Implementation

Governance, Risk, Compliance

Project & Program Management

Identity & Access Mgmt.

Business Continuity Mgmt.

IT Service Mgmt. (ITSM)

IT Security

Transition & Outsourcing

Vendor Mgmt.

Cloud & Virtualization

Data-Driven Services

Artificial Intelligence & RPA

Ein Bild von ITC
Ein Bild von ITC
DORA Implementation

Implementing the requirements of the Digital Operational Resilience Act (DORA) is currently a top priority for many companies in the financial sector and ICT third-party providers. This affects financial service providers, credit institutions, payment service providers, securities firms, insurance companies, as well as data providers and rating agencies. ICT third-party providers include cloud computing service providers, data analytics services, data centers, and software vendors.

Last year, the foundations for the information register and many other DORA-initiated measures were established. Many smaller financial service providers lack experienced personnel for DORA implementation. Challenges include integrating external data sources for automated information register population, the now mandatory annual submission of registers to BaFin, establishing reporting procedures for significant ICT incidents, and the assessment and evaluation of contracts and suppliers for third-party risk management.

ITC provides support in professional consulting, data population, contract and supplier relationship analysis, technical integration into existing ITSM and GRC solutions, or selection of standard software for DORA compliance.

  • Third-Party Risk Management: Reviewing and updating outsourcing guidelines, contracts, and processes for risk analysis.
  • ICT Governance and Risk Management: New compliance requirements necessitate adjustments to internal policies and processes.
  • Digital Resilience Review: Development and regular execution of new testing processes such as threat-led penetration tests.
  • Incident Reporting: Development of an internal reporting system for significant ICT incidents.

 

 

Some of our References.

Insurance Company

  • Establishment of an information network (CMDB/SMDB) and information register (contracts, suppliers, processes, services).
  • Implementation of a reporting system for significant ICT incidents.
  • Measures for vulnerability management and quality assurance (vulnerability tests and penetration tests).
  • Interface setup and data integration.
  • Initiation and control of technical implementation measures, quality management, agile project planning, and management reporting.

Insurance Company

  • Implementation of VAIT & DORA requirements.
  • Introduction of IT service management and IT risk management in line with BaFin regulations.
  • Pre-analysis, process analysis, rollout planning and coordination.
  • Initiation and control of technical implementation, quality management, project planning, and management reporting.
  • Training, implementation, and documentation.

Development Bank

  • Consulting and support in establishing an information register for the specialist department.
  • Reviewing and transferring contracts and suppliers, coordinating with legal and vendor management, risk assessment, and setting up measures to meet BAIT and DORA requirements.
  • Requirements management, migration planning, and project management in an agile environment.

Insurance Company

  • Introduction of the "new IT workplace" considering BaFin regulatory requirements.
  • Status documentation comparison, security and penetration testing.
  • Inventory and risk assessment of workplace applications.
  • Assignment of contracts and suppliers, establishment of third-party risk management.
  • Rollout planning and coordination of related processes.
  • Training measures and quality management controls.
Governance, Compliance and Risk (GRC)

GRC ensures that your business practices comply with legal requirements to avoid legal consequences. At the same time, GRC is an enabler and booster for your business when designed and implemented smartly. Effective governance helps protect corporate value and enhance reputation. Governance processes improve the efficiency of business operations and contribute to value creation.

In effective risk management, risks are identified, and mitigation measures are developed before a project starts. This process involves a thorough review of potential risks arising from the project and developing strategies to avoid or minimize these risks. Controls can be technical or organizational measures to reduce or prevent risks. They can also be part of a risk assessment to minimize or eliminate potential risks. Together, risk assessments and controls are essential tools for risk prevention and successful project execution.

Implementing governance, risk, and compliance is not only a regulatory requirement but also a strategic decision for companies. Customers value businesses that understand their responsibilities, manage risks effectively, and maintain ethical business practices.

 

 

 

Some of our References.

Development Bank

  • Support during the BAIT special audit, analysis of implementation status, and derivation of action measures.
  • Creation of a cloud usage policy and design of two-factor authentication at the jump server in the DMZ.
  • Execution of IT controls for risk mitigation and evaluation of external administrative rights.

Insurance Company

  • Management of the Governance IAM sub-project within a VAIT program.

Bank

  • Consulting and implementation of regulatory requirements in preparation for and after a § 44 KWG audit.

Foreign State Bank

  • Project to relocate headquarters to Frankfurt, integration of subsidiaries, and development of an IT risk strategy.
  • Support during BaFin special audits, expansion of IT guidelines, and execution of a new product process.

Large Bank

  • Creation and maintenance of a risk repository, assessment of IT risks, and financial evaluation.
  • Management reporting on IT risks, risk mitigation initiatives, and new risk assessments.

IT System House

  • Consulting and implementation of cloud regulatory topics for medical, insurance, and public sectors.
  • Designing solutions for health data in the cloud.

Financial Service Provider

  • Consulting and awareness training for data leakage prevention and information leakage management.

Energy Sector

  • Consulting and implementation of regulatory topics within the framework of KRITIS.

Industry

  • Execution of a data protection audit and GDPR risk assessment.
Ein Bild von ITC
Project & Program Management

Organizational changes involve numerous complex processes, risks, interdependencies, and conflicting priorities. Introducing and executing project and program management provides an organization with a structured framework to successfully implement changes and achieve strategic goals in a planned and secure manner.

We support companies throughout all phases of project and program management with experienced project managers – from analysis and target development to sustainable implementation. Whether it’s a regulatory project, system migration, ERP implementation, software rollout, or seeking experienced PMO support, we bring our expertise to the table.

These use cases represent just a selection of the diverse applications in IT project and program management. Depending on the specific requirements and objectives of a company, we can identify and adapt additional scenarios.

 

 

Some of our References.

Credit Institution

  • Sub-project management and governance implementation as part of a major provider transition.
  • Handover of data center operations to a second provider.

Bank

  • Professional project management in provider management.
  • Independent transition of IT providers into outsourcing control, including PMO services.

Insurance Company

  • Project management and implementation of IT process restructuring.
  • Focus on service management and GRC, including PMO services.
  • Leadership of the governance sub-project in the IAM context.

Transport and Logistics

  • Project management for railway technical equipment.
  • Scheduling, cost control, documentation, and support during project implementation.

Pharmaceutical Corporation

  • Project management and PMO for implementing new software in workplace virtualization.
  • Adopting the IT project organization using an agile approach.
Identity and Access Management

The goal is to ensure the security of IT systems and data, enhance user productivity, and meet compliance requirements. Effective identity and access management enables companies to reduce risks and better protect their IT infrastructure.

With the increasing interconnection of devices and systems, the growing importance of cloud services, and the rising complexity of security threats, IAM is becoming ever more critical. IAM systems will increasingly leverage artificial intelligence and machine learning to detect risks early and prevent security breaches. At the same time, there will be a stronger focus on user-friendliness and self-service features for users. The future of IAM promises exciting developments that will help make data and systems safer and more efficient.

 

 

Some of our References.

State Bank

  • Creation of an IAM target architecture, including architecture and use cases for the Omada Identity Suite.
  • Addressing audit findings, mapping authorization concepts, and consulting on role modeling and implementation.

Large Bank

  • Establishment of IAM test management for 120,000 identities using Quest One Identity Manager.
  • Ensuring audit security and managing testing processes.

Insurance Company

  • Design and implementation of Privileged Access Management with CyberArk.
  • System integration, SIEM integration, and governance design.

Bank

  • Preliminary audit for BaFin special examination, IS risk management, and determination of protection needs.
  • Risk quantification and review of security concepts for payment transactions and core banking systems.

Public Institution

  • Introduction of an electronic user application process and a monitoring system for privileged accesses.
  • Implementation of Active Directory and LDAP user access, as well as modification of user roles.
Ein Bild von ITC
Ein Bild von ITC
Business Continuity Management (BCM)

BCM strengthens a company's ability to quickly ensure its business activities in the event of a disruption, outage, or potential threat. It focuses on developing preventive measures and plans to ensure the company can continue operating and generating value during incidents. We work with you to identify risks and jointly implement strategies and processes to minimize them. With increasing threats, BCM is essential for safeguarding value creation.

We Support You in the Following BCM Phases:

  • Analysis: We analyze the organization's business functions to determine which are critical and how they may be impacted.
  • Planning: Plans are developed to ensure that essential business functions can be maintained during outages or disruptions. This includes prevention measures, emergency response, and recovery strategies.
  • Implementation: Execution of plans and provision of necessary resources.
  • Review: Ensuring that measures meet requirements and are effective in an emergency.

 

 

Some of our References.

Large Bank

  • Design, execution, and documentation of protection needs analyses for IT systems, BCM strategy, and emergency tests.
  • Aligning BCM planning with IT recovery times and creating guidelines for IT resilience.

Industry

  • Establishment and operation of business continuity management, including emergency and crisis management.
  • Project management for BCM setup, emergency plans, and regular emergency and crisis tests, including management reviews.

Financial Service Provider

  • SCM/BCM/ITSCM program: Establishment of a continuous lifecycle management for strategic crisis management and business continuity management.
  • Ensuring audit readiness with respect to legal and regulatory requirements.
IT Service Management (ITSM)

In an ever-evolving digital world, strong and business-oriented IT service 
management is crucial for creating corporate value.

We support you across the following ITSM areas – from analysis and design 
to implementation and continuous review:

Key IT Services in Our Customer Projects:

  • Service Level Management: Definition, optimization, and continuous 
    review of IT services to ensure user satisfaction.
  • Service Desk, Incident, and Problem Management: Processes, tools, 
    and workflows to efficiently and satisfactorily handle service requests.
  • Change Management: Supporting organizational change to increase 
    understanding and acceptance among all stakeholders

 

 

Some of our References.

Financial Service Provider

  • Initialization and operationalization of IT Service Continuity Management as part of emergency management.
  • Awareness and training for IT Service Continuity Management.

Bank

  • Continuous improvement of IT service management processes, including incident, problem, change, and service level management.

Logistics & Transport

  • Initiatives to enhance the IT distribution applications sector.

Insurance

  • Project management and implementation of IT process restructuring, focusing on IT service management.
  • Key areas: cultural change, problem and incident management, ITSM tool implementation, training, and PMO support.

Bank

  • Rollout of IT Service Continuity Management across 22 regional subsidiaries, including coaching and empowerment of role holders.
Ein Bild von ITC
Ein Bild von ITC
IT-Security

What do a large bank, a pharmaceutical corporation, and a medium-sized insurance company have in common? They all place a strong focus on effective IT security measures.

Typical project areas with our clients include:

  • Confidentiality of information,
  • Integrity of information and systems,
  • Sustainable assurance of the availability of information and systems.

Based on frameworks like ISO 27001, NIST Cybersecurity Framework, DORA, COBIT, KRITIS, BAIT/VAIT, and CIS Critical Security Controls, we can collaboratively develop and implement a comprehensive, systematic, and effective approach for your IT security.

 

 

Some of our References.

Financial Service Provider

  • Initialization and operationalization of IT Service Continuity Management as part of emergency management.
  • Awareness and training for IT Service Continuity Management.

Bank

  • Continuous improvement of IT service management processes, including incident, problem, change, and service level management.

Logistics & Transport

  • Initiatives to enhance the IT distribution applications sector.

Insurance

  • Project management and implementation of IT process restructuring, focusing on IT service management.
  • Key areas: cultural change, problem and incident management, ITSM tool implementation, training, and PMO support.

Bank

  • Rollout of IT Service Continuity Management across 22 regional subsidiaries, including coaching and empowerment of role holders.
Transition und Outsourcing

In an ever-evolving IT landscape, companies often undertake transition and outsourcing projects to optimize operations, reduce costs, and access specialized expertise. However, these initiatives often come with a range of challenges that require careful planning and execution.

Anticipating key challenges and implementing effective solutions are critical to the success of such projects:

  • Effective Communication: Utilize clear channels, documentation, and collaboration tools.
  • Data Security Measures: Implement encryption, access controls, and compliance protocols.
  • Quality Assurance: Set clear standards, conduct thorough testing, and provide feedback.
  • Vendor Selection: Conduct comprehensive evaluations based on track records, certifications, and alignment with objectives.
  • Change Management: Address employee concerns through communication, training, and feedback mechanisms.

Typical Transition & Outsourcing Projects with Our Clients Include:

  • IT Infrastructure: Transferring operations or parts of operations to an external service provider.
  • Data Centers
  • Technical Support
  • Software Development
  • Data Analytics
  • Cybersecurity

 

 

Some of our References.

Support in IT Infrastructure Transition

  • Assistance with the transition of IT infrastructure from multiple providers to a new provider.
  • Responsible for status reporting, stakeholder management, and timeline planning.
  • Challenge: Coordination between old and new contracts.

Data Center Relocation and Portal Project

  • Consulting and management for data center relocation and portal project.
  • Managing interfaces and international project implementers, including agile software development.
  • Leading the project team, escalation management, and management support.

Project Management for Data Center Relocation

  • Project management and planning for the data center relocation.
  • Identifying applications, stakeholders, and systems.
  • Planning, coordinating, and monitoring relocations, as well as creating the PMIS.
Ein Bild von ITC
Vendor Management

In the dynamic IT environment, companies continuously seek ways 
to optimize their processes, drive innovation, and remain competitive 
in a fast-paced market.

The trend in vendor management is moving towards strategic collaboration with external providers, expanding skills, ramping up expertise, and smartly optimizing processes. Modern vendor management offers numerous advantages but also presents unique challenges that require careful navigation.

Typical projects with our clients Include:

Some of our References.

Bank

  • Development of a rating framework for evaluating IT providers and conducting provider assessments.
  • Setting up a KPI dashboard for service fulfillment and data center certifications according to TIA 942.

State Bank

  • Provider management and transitioning IT providers into outsourcing control.
  • Implementing measures to close audit findings and conduct self-assessments.
  • Further development of control processes, interfaces, and management reporting.

Financial Service Provider

  • Managing the migration of payment processing applications to a new platform.
  • Project management, provider management, and coordination with the software provider.
  • Operational contract management, negotiation of framework agreements, and SLAs.
Ein Bild von ITC
Ein Bild von ITC
Cloud and Virtualization

By utilizing cloud services, you can scale resources such as computing power, storage, and network capacities as needed. This allows for optimal resource utilization and prevents over- or under-provisioning.

Virtualization enables the creation of virtual resources on physical servers, leading to better utilization of hardware resources. This allows for the creation and restoration of backups and clones. In the event of a failover, servers can be transferred to other infrastructures. Additionally, the number of application instances can automatically adjust to the user count. Cloud collaboration services future-proof your collaboration landscape.

Core Topics for Our Clients:

  • Multi-cloud strategies
  • Hybrid cloud solutions
  • Serverless computing
  • Containerization and orchestration
  • Edge computing
  • AI/ML in cloud services
  • Infrastructure as Code (IaC)
  • Data management and analytics
  • Security and compliance
  • DevOps and CI/CD

 

 

Some of our References.

Pharmaceutical Corporation

  • Migration of IT resources and applications to the cloud, including evaluation of cloud service providers and planning data migrations.
  • Integration of cloud services and training teams for cloud operations.

Insurance Company

  • Consulting at the CxO level for establishing a Cloud Competence Center and cloud operations.
  • Designing the cloud strategy and governance, including involving relevant stakeholders at the CxO level.

State Bank

  • Planning and coordination of regulatory measures for migrating decentralized applications and services to the cloud.
  • Project management for development, testing, approval, and production of the cloud migration, including time and budget planning.

State Bank

  • Planning and implementation of hybrid cloud migration, including incident and change management processes for OSPlus and other systems.
  • Infrastructure management for mainframe, Linux, Windows, and hybrid cloud.
Data Driven Services

Data-driven companies have a clear competitive advantage. In an era defined by unprecedented data volumes, companies are increasingly recognizing the transformative potential of leveraging this wealth of information. We specialize in helping you unlock the potential of your data. We support you strategically, conceptually, technologically, and in implementation, enabling you to use data as a strategic resource to drive innovation and achieve sustainable growth.

Core Topics for Our Clients:

  • Data Analytics
  • Business Intelligence (BI)
  • Machine Learning and Artificial Intelligence (AI)
  • Big Data
  • Data Governance and Management
  • Data Visualization
  • Data Engineering
  • IoT and Sensor Data
  • Data Governance, Data Privacy, and Security
  • Cloud Computing and Data Warehousing

 

 

Some of our References.

Telecommunications Group

  • International program for data-driven work with Collibra, including data governance, roles, process mapping, skill management, and awareness-building.
  • Support with the introduction of new working methods and change management.

Transport and Logistics

  • Project management for the introduction of an enterprise data lake and data governance.

Transport and Logistics

  • Design of an Azure-based logistics platform for e-mobility for vehicle and goods tracking with route optimization for electric vehicles.

Public Sector

  • Design and development of an e-government portal: requirements analysis, system design, technology selection, architecture design, and prototyping.

Energy Sector

  • Further development of a data pipeline with data transformation, AI methods, and process automation in Snowflake Cloud DWH.
  • Modeling of energy prices and supporting the business team with fundamental analysis and smart origination.
Ein Bild von ITC
Ein Bild von ITC
Artificial Intelligence and RPA

Between optimism and fear: No topic triggers companies more than AI and RPA. Artificial Intelligence (AI) and Robotic Process Automation (RPA) are revolutionizing how businesses operate, offering tangible benefits across industries.

  • Enhanced Customer Experience: AI and RPA enable personalized customer experiences through chatbots and predictive analytics. Companies can anticipate customer needs and provide tailored recommendations, strengthening customer loyalty.
  • Improved Decision-Making: AI analyzes large datasets and provides valuable insights for strategic decisions. Advanced analytics help identify trends and opportunities that manual analysis might miss.
  • Increased Efficiency: AI and RPA automate repetitive tasks, reducing time and effort while boosting efficiency and productivity.
  • Cost Savings: Automation with AI and RPA reduces labor costs, minimizes errors, and optimizes resource utilization. This leads to higher operational efficiency and cost-effectiveness.
  • Accuracy and Quality: AI and RPA technologies enhance accuracy and consistency, reduce errors, and ensure data integrity, resulting in higher product quality and greater customer satisfaction.

 

 

Some of our References.

Financial Service Provider

  • Implementation of RPA for automating the mortgage application process.
  • Reduced processing time from weeks to hours for faster approvals and increased customer satisfaction.

Healthcare Provider

  • Deployment of AI-powered chatbots for handling patient inquiries and appointment scheduling.
  • Faster response times and cost savings through automation.

Telecommunications Group

  • AI-driven chatbots for quickly handling customer inquiries and resolving technical issues at the first contact.

eCommerce Retailer

  • AI algorithms for optimizing product recommendations based on browsing and purchasing behavior.
  • Enhanced customer loyalty, conversion rates, and revenue through personalized recommendations.

Manufacturing Company

  • Implementation of AI solutions for predictive maintenance by analyzing sensor data.
  • Minimization of downtimes, reduction of maintenance costs, and extension of equipment lifecycle.

A Picture says more
than a thousand words.

Ein Bild von ITC
Ein Bild von ITC
Ein Bild von ITC
Ein Bild von ITC
Ein Bild von ITC
Ein Bild von ITC
Ein Bild von ITC
Ein Bild von ITC
Ein Bild von ITC

it is Time for your

fresh breeze

Ein Bild von ITC

Footer Project Sourcing

I.T.C

I.T.C. Incentive Training Communication GmbH
Philipp-Reis-Straße 14
D-63303 Dreieich

Kontakt

Phone: +49 6103 3783-0
Fax: +49 6103 3783-100
E-Mail: team@itc.de

Mehr

Start
Cases
About us
FAQ
Contact
People Development
Project Sourcing

Ein Bild von ITC
Legal info Privacy policy
LinkedIn Ein Bild von ITC Facebook Ein Bild von ITC