Area of service05 / 05

Implementation.

You know who implements which action by when, and when its effect will be checked again.

The situation

See earlier. Decide earlier.

The decisive information is often already there long before its significance becomes obvious. What matters is bringing relevant developments to the table while there is still time for decisions and preparation.

A finding captures a moment. pleXcreen shows the trajectory. Business reality changes: new vulnerabilities emerge. Systems are modified. Credentials surface. Business partners change their risk profile. Measures are implemented.

That is why the work does not end with the first report. Relevant developments are observed and connected with the existing overall picture: What is new? What was fixed? What has reappeared? Where you wish and the mandate provides for it, we also support implementation operationally, so that a prioritised list of measures does not fail because of unclear responsibilities, missing expertise or day-to-day business.

The earlier you know, the more options you have.

The question for leadership

Is our decision having the intended effect?

What pleXcreen delivers to leadership

  1. 01

    Measures with ownership

    Who implements which measure by when, recorded and supported.

  2. 02

    Effectiveness check

    After implementation, it is retested whether the exposure has disappeared or reappears.

  3. 03

    A living overall picture

    Observations with a history: first seen, changed, fixed, reappeared.

Action, handover, later review.

Dark plant corridor: on a steel door hang a clipboard with a checklist and a key beside a new padlock; a copper light at the far end of the corridor.Fictitious example
actionAccess restricted, step documented.
ownershipHanded to a named person, with a date.
effectiveness checkReviewed again later. Until then the effect remains open.
  1. 1action Access restricted, step documented.
  2. 2ownership Handed to a named person, with a date.
  3. 3effectiveness check Reviewed again later. Until then the effect remains open.
Illustrative scene. An action is only complete once its effect has been checked again.
Technical detail · optional · fictitious sampleHow an action becomes traceable.

A fictitious action sheet: owner, date, status and the later effectiveness check.

Fictitious exampleAction sheet · no client data

Action M-03: secure the remote maintenance access.

StepOwnerDateStatus
01Baseline documentedpleXcreenWeek 1done
02Access limited to fixed addressesHead of ITWeek 2done
03Handover to operationsHead of IT → OperationsWeek 3in progress
04Renewed effectiveness checkpleXcreenWeek 8planned

Effectiveness check

Is the access still reachable from non-approved networks? Same method as the initial test; the result comes only after the check.

Method, scope and limits

01

What the support covers

Depending on the agreement, support ranges from structuring a plan of measures, through steering individual projects, to operational work within your team. Where specialist knowledge is required, for technical hardening, contractual safeguards or legal validation, for example, we involve partners and coordinate their work in line with the agreed priorities.

A central element is reassessment: once a measure has been implemented, we check whether the starting situation has actually changed. What is no longer observed counts as no longer confirmed, not automatically as resolved. This distinction prevents measures from being deemed effective simply because they were completed.

02

Forms of collaboration

The overall picture determines how the work continues: as a one-off analysis with a concluded finding, as a project with a defined outcome, as ongoing support with recurring observation and reassessment, or as call-off whenever a concrete need arises. Scope and terms are agreed individually.

Ongoing support does not mean you operate software. Technology structures and consolidates the evidence base; people verify, interpret and accompany. Leadership receives what it needs to decide, and remains responsible.

03

How implementation begins

Implementation and ongoing support presuppose an existing overall picture or a clearly defined question. As a rule the collaboration begins with an initial conversation and a Schlaglicht; support is then agreed as the appropriate deepening. It can also build on existing third-party findings, provided their reliability has been reviewed beforehand.

04

Who this is for

Executive management and owners who want findings not merely known but addressed; organisations without their own capacity to steer security or governance projects; companies seeking an independent instance to verify the effect of their measures.

What this service is not

  • Not a replacement for your line responsibility, decisions and approvals remain yours.
  • No guarantee of a particular outcome; what is supported is the implementation of agreed measures, whose effect is continuously reviewed.
  • Not a standard package: scope, roles and terms are agreed individually for each mandate.

Frequently asked questions

Does pleXcreen implement measures itself or only accompany them?
Both are possible and are agreed within the mandate: from steering and coordination, through operational work within your team, to involving specialised partners for individual measures.
What does reassessment after implementation mean?
After a measure, we check whether the observed starting situation has actually changed. An observation that no longer occurs counts as no longer confirmed, not automatically as resolved.
Can support build on findings from other providers?
Yes, provided their reliability has been reviewed beforehand. Which findings count as supported and which remain open is clarified jointly before support begins.

Next step

Arrange an initial conversation.

Free of charge, with no assessment. Getting in touch triggers neither an engagement nor any technical testing. Scope and depth are agreed only afterwards.