{"id":1006204,"date":"2025-07-02T11:30:46","date_gmt":"2025-07-02T09:30:46","guid":{"rendered":"https:\/\/www.teal-consulting.de\/2025\/07\/02\/stand-der-technik-analyse-der-teletrust-handreichung-teil-2-2\/"},"modified":"2025-07-02T16:09:26","modified_gmt":"2025-07-02T14:09:26","slug":"state-of-the-art-analysis-of-the-teletrust-guide-part-2-2","status":"publish","type":"post","link":"https:\/\/www.teal-consulting.de\/en\/2025\/07\/02\/state-of-the-art-analysis-of-the-teletrust-guide-part-2-2\/","title":{"rendered":"State of the art \u2013 Analysis of the TeleTrusT guide (Part 2\/2)"},"content":{"rendered":"<div class=\"wpb-content-wrapper\" id=\"wpb-content-root\">[vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;30&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text][\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h2>\u201cState of the art\u201d &#8211; PART 2<\/h2>\n[\/vc_column_text][vc_empty_space height=&#8221;50&#8243;][vc_column_text css=&#8221;&#8221;]In our two-part series, we would like to discuss the current guidelines issued by the TeleTrusT working group and present our view. This is the second part of the series in which we address these topics:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>2.29 Monitoring of directory services and identity-based segmentation<\/li>\n<li>2.31 Cloud security platform<\/li>\n<li>3.9 Securing privileged user accounts<\/li>\n<li>3.17 Business continuity management (BCM)<\/li>\n<li>3.18 Emergency and crisis management<\/li>\n<li>3.20 Technical security review<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li style=\"list-style-type: none;\"><\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]In the first part of the series, we looked at the following topics:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Password management<\/li>\n<li>2.5 Encryption of data carriers<\/li>\n<li>2.8 Protection of electronic data traffic with PKI<\/li>\n<li>2.21 System hardening<br \/>\n2.28 Securing administrative IT systems<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]But now it&#8217;s time to get started&#8230; \ud83d\ude0a[\/vc_column_text][vc_empty_space height=&#8221;50&#8243;][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h2><span id=\"Relevante_Bausteine_fuer_die_IT-Sicherheit\">Other relevant components for IT security<\/span><\/h2>\n<p>&nbsp;<\/p>\n<h3>(3.2.29) Monitoring of directory services and identity-based segmentation<\/h3>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Many successful cyberattacks\u2014whether carried out by state-sponsored groups or professional cybercriminals\u2014have one thing in common: they exploit compromised user accounts. Often, the attack begins with a single point of access, such as leaked credentials or poorly secured service accounts, and ends with the complete compromise of the environment\u2014often without the use of malware.<\/p>\n<p>Directory services such as <strong>Microsoft Active Directory or EntraID<\/strong> are a particular focus here. Attackers first take over a seemingly unimportant system and then spread further and further.<\/p>\n<p>Silently and partially automated, they gradually expand their permissions \u2013 a process known as lateral movement. Until the highest privileges have been achieved and the entire environment is compromised.<\/p>\n<p><strong>Therefore, monitoring directory services and intelligent, identity-based segmentation of the infrastructure are among the most important protective measures today.<\/strong><\/p>\n<p>This measure is specifically aimed at:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Attacks with stolen or darknet-traded access data \u2013 without any malicious code.<\/li>\n<li>The exploitation of vulnerabilities in directory services and poorly protected service accounts.<\/li>\n<li>The unnoticed spread of attackers through permission inheritance and faulty access paths.<\/li>\n<li>The misuse of privileged accounts, including privilege escalation and identity theft.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]<strong>Separate identities &amp; limit risks<\/strong><\/p>\n<p>Microsoft&#8217;s tried-and-tested tiering model helps to mitigate precisely these attack vectors. The infrastructure is logically and technically divided into <strong>three security zones (tiers)<\/strong>:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li><strong>Tier 0<\/strong> protects identity management and other critical systems, such as domain controllers, PKI systems, and backup servers.<\/li>\n<li><strong>Tier 1<\/strong> comprises enterprise applications such as databases and file servers.<\/li>\n<li><strong>Tier 2<\/strong> contains all end devices and user accounts for office activities, the internet, and email.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]The aim of the model is to isolate critical accounts and systems from each other \u2013 through separate administration channels, user accounts, and login paths. This allows the effects of an attack to be specifically limited in the event of an emergency. A compromise in Tier 2 thus remains in Tier 2 \u2013 and does not immediately endanger the entire infrastructure.<\/p>\n<p>The model is supplemented by continuous monitoring of directory services, with a focus on unusual login attempts, changes in rights, or suspicious access patterns \u2013 even when attackers use legitimate access data and classic endpoint protection systems fail.<\/p>\n<p>Those who do not segment and monitor their identities and directory services risk losing complete control in an emergency. The combination of intelligent rights allocation (tiering) and continuous monitoring helps to significantly reduce the attack surface \u2013 and even stop sophisticated identity attacks at an early stage. Our <a href=\"https:\/\/www.teal-consulting.de\/en\/2021\/02\/15\/esae-deep-dive-serie-part-7-tiering-model\/\">blog articles<\/a> and <a href=\"https:\/\/teal-consulting.webinargeek.com\/webinar-datensicherheit-durch-tiering-schutz-auf-jeder-ebene?cst=channel\" target=\"_blank\" rel=\"noopener\">webinars<\/a> offer concrete assistance in introducing a tiering model.<\/p>\n<p>Interestingly,<strong> in the current TeleTrusT Report 2025<\/strong>, the measure continues to be<em> rated highly, both in terms of its proven effectiveness in practice and its recognition by experts in the field.<\/em><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1006182 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-1-teil2.png\" alt=\"\" width=\"845\" height=\"583\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-1-teil2.png 845w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-1-teil2-300x207.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-1-teil2-768x530.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-1-teil2-700x483.png 700w\" data-sizes=\"(max-width: 845px) 100vw, 845px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 845px; --smush-placeholder-aspect-ratio: 845\/583;\" \/>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h3>(3.2.31) Cloud-security platform<\/h3>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]The use of cloud solutions is now part of everyday life for most companies. It is the result of numerous cloud-first initiatives and efforts to deliver IT services faster, scale flexibly, and reduce costs at the same time. In practice, however, the hoped-for cost savings have not always been realized\u2014not least against the backdrop of current geopolitical tensions and the increasing importance of data sovereignty.<\/p>\n<p>Nevertheless, cloud services are now an integral part of modern IT architectures. This makes it all the more important to ensure that both the respective cloud tenant and the services used are configured and operated securely. The hardening recommendations of the Center for Internet Security (CIS), which were also discussed in the chapter on system hardening, provide helpful guidance here.<\/p>\n<p>The cloud security platform covers all three areas of a security strategy (availability, integrity, and confidentiality).<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1006184 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-2-teil2.png\" alt=\"\" width=\"845\" height=\"554\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-2-teil2.png 845w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-2-teil2-300x197.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-2-teil2-768x504.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-2-teil2-700x459.png 700w\" data-sizes=\"(max-width: 845px) 100vw, 845px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 845px; --smush-placeholder-aspect-ratio: 845\/554;\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>TeleTrusT calls for the following measures to be implemented as a minimum:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Infrastructure-as-code testing prior to resource provisioning (compliance, misconfigurations (IaC \/ code security)<\/li>\n<li>Compliance testing and detection of misconfigurations in the cloud (CSPM) against relevant compliance and recommended best practice frameworks<\/li>\n<li>Prioritized vulnerability analysis from development to runtime (vulnerability management)<\/li>\n<li>Display of possible attack paths, chaining of vulnerabilities, authorization keys, and misconfigurations (CASM)<\/li>\n<li>Inventory of cloud infrastructure components<\/li>\n<li>Verification of permissions (CIEM)<\/li>\n<li>Behavior analysis and early detection of malicious activities within cloud accounts (UEBA)<\/li>\n<li>Immediate detection of malicious activities through sensors within active workloads, including malware detection and file integrity monitoring (CWPP)<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]A good first step is to review the current situation. In our Cloud Security Assessment, we not only follow the recommendations of TeleTrusT, but also examine the following in particular:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Know-how transfer to understand the methods used by attackers and protective mechanisms.<\/li>\n<li>Verification of identity protection and thus of selected resources and their configuration, e.g., key vaults<\/li>\n<li>In general, Azure policies offer a technical means of implementation; if the customer already makes use of them, we also have access to the corresponding compliance reports, which we can analyze.<\/li>\n<li>Checking Defender KPIs and the frequency\/quality of processing vulnerabilities found at runtime<\/li>\n<li>Presentation of possible attack paths, chaining of vulnerabilities, authorization keys, and misconfigurations (CASM). If misconfigurations are detected, the resulting attack path is discussed in detail again in the assessment report<\/li>\n<li>Quality of the inventory of cloud infrastructure componentsReview of permissions (CIEM)<\/li>\n<li>Behavior analysis and early detection of malicious activities within cloud accounts (UEBA), in particular log forwarding, use of SIEM (e.g., Sentinel), staffing of the SOCReview of risk-based conditional access policies in use (risk assessment by Microsoft based on user behavior)<\/li>\n<li>We generally review the use of Defender products or products that offer a comparable range of functions to meet this requirement.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]<strong>Contact us to find out how secure your cloud tenant is.<\/strong>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h3>(3.3.9) Securing privileged user accounts<\/h3>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Securing privileged user accounts remains an urgent measure that needs to be implemented:<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1006186 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-3-teil2.png\" alt=\"\" width=\"845\" height=\"583\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-3-teil2.png 845w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-3-teil2-300x207.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-3-teil2-768x530.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-3-teil2-700x483.png 700w\" data-sizes=\"(max-width: 845px) 100vw, 845px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 845px; --smush-placeholder-aspect-ratio: 845\/583;\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>In security assessments, we repeatedly find that permissions in corporate infrastructures have grown historically, are not or insufficiently documented, and there are no established processes that control the granting and revocation of permissions. Companies are overwhelmed by the task of precisely defining who needs which rights and mapping this technically. PAM systems can help with this, but here too, it must be defined who should have access to what. In addition, service accounts must be assigned to an owner. The owner, in turn, must define the required access rights.<\/p>\n<p>In summary, the measure must ensure the following:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Guidelines and regulations for the use and handling of administrative permissions and accounts must be established.<\/li>\n<li>A restrictive permission strategy must be pursued, according to which access to resources is generally prohibited unless it has been explicitly permitted or approved.The need-to-know and least privilege principles must be observed when assigning<\/li>\n<li>administrative permissions.<\/li>\n<li>The assignment of administrative permissions must be carried out in a defined and controlled process in which a request is approved and documented.<\/li>\n<li>Each administrative user account must be uniquely assignable to a person. In the case of functional users, however, a responsible person must be documented.<\/li>\n<li>When granting temporary administrative permissions, these must have a time\/logical restriction and must be revoked when they are no longer needed.<\/li>\n<li>Up-to-date and complete documentation of all administrative accounts with their respective permissions must be maintained.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]If you do not have a PAM system in place, you can also use a simple Excel list to document highly privileged users. We like to use such lists in the Tier 0 area or for smaller customers.<\/p>\n<p>However, it is essential to start defining roles and specifying their permissions. Once this has been done, users can be assigned to these roles. Only after approval has been granted are users added to the roles. The process is rounded off by a continuous review (e.g., annually) to determine whether permissions are still needed or can be removed.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h3>(3.3.17) Business continuity management (BCM)<\/h3>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Companies that are prepared for crises not only secure their business processes, but also their very existence. This is precisely where <strong>business continuity management (BCM)<\/strong> comes in.<\/p>\n<p>BCM is not a reactive emergency tool, but rather a strategic, systematic approach that companies can use to prepare for outages and ensure that time-critical business processes can be maintained or quickly restored even under adverse conditions.<\/p>\n<p>The goal: minimizing downtime, protecting against reputational and financial damage, and strengthening organizational resilience.<\/p>\n<p><strong>What does a functioning BCM consist of?<\/strong><\/p>\n<p>An effective Business Continuity Management System (BCMS) consists of several components:<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li><strong>Risk assessment &amp; threat analysis<\/strong><br \/>\nWhat are the realistic risks for your company\u2014and how severe could their impact be? This analysis forms the basis for all further measures.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol start=\"2\">\n<li><strong>Business Impact Analysis (BIA)<\/strong><br \/>\nWhich processes are critical to operations? How long can they be down without serious consequences? BIA helps to set priorities and plan a sensible recovery strategy.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol start=\"3\">\n<li><strong>Strategy development &amp; role clarification<\/strong><br \/>\nWhat measures need to be taken in an emergency? Who is responsible? Effective BCM requires clear structures\u2014and employees who know their tasks in a crisis and are able to carry them out.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol start=\"4\">\n<li><strong>Implementation &amp; Testing<\/strong><br \/>\nPlans alone are not enough: <strong>emergency strategies must be implemented in practice, tested, and regularly updated<\/strong>\u2014using tests, simulations, and real incidents.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]What exactly does BCM protect against? BCM protects against a wide range of risks:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Natural disasters (e.g., floods, storms)<\/li>\n<li>Cyberattacks (e.g., ransomware, DDoS)<\/li>\n<li>Technical failures (e.g., power, hardware, software errors)<\/li>\n<li>Pandemics or staff shortages<\/li>\n<li>Supply chain disruptions caused by external service providers<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]The last point is particularly critical: <strong>modern companies are heavily dependent on IT, supply chains, and third-party providers<\/strong>. A good BCMS therefore also takes external risks into account and ensures that dependencies can be identified, assessed, and compensated for at an early stage.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1006188 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-4-teil2.png\" alt=\"\" width=\"845\" height=\"554\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-4-teil2.png 845w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-4-teil2-300x197.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-4-teil2-768x504.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-4-teil2-700x459.png 700w\" data-sizes=\"(max-width: 845px) 100vw, 845px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 845px; --smush-placeholder-aspect-ratio: 845\/554;\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>A functioning BCM not only ensures responsiveness in an emergency, but also<strong> builds trust among customers, partners, and regulatory authorities. It is no longer a marginal issue<\/strong>\u2014it is an essential component of any professional security strategy.<\/p>\n<p>In practice, BCM processes are often in place, but they are not adequately tested. Who has performed a forest recovery and prepared for an emergency? The topic of continuous improvement is also very often neglected. Although this cannot be directly derived from the necessity of a BCM process, continuous improvement and regular testing are essential in order to be well prepared in an emergency. Only those who test their recovery processes under real conditions and learn from every incident can react quickly, safely, and effectively in an emergency.[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h3>(3.3.18) Emergency and crisis management<\/h3>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]When systems fail, data is encrypted, or an attack hits the entire infrastructure, every minute counts. But not every incident is the same\u2014which is why different strategies are needed to respond appropriately. This is where emergency and crisis management come into play.<\/p>\n<p>Emergency management aims to respond quickly and effectively to acute IT disruptions such as cyberattacks, system failures, or technical errors. The focus is on minimizing the impact and quickly restoring business operations \u2013 with clear processes, responsibilities, and decision-making paths.<\/p>\n<p><strong>Crisis management<\/strong>\u00a0always comes into play when an event has a major impact \u2013 or when an IT emergency turns into a company-wide crisis. This is not just about operational measures, but about strategic crisis management: communication, leadership, protection of people, assets, and reputation.<\/p>\n<p>To prevent chaos from turning into panic, a structured approach is needed:<\/p>\n<ol>\n<li style=\"list-style-type: none;\">\n<ol>\n<li><strong>Assess the situation<\/strong> \u2013 What has happened?<\/li>\n<li><strong>Evaluate the situation<\/strong> \u2013 What are the potential consequences?<\/li>\n<li><strong>Plan measures<\/strong> \u2013 What needs to be done?<\/li>\n<li><strong>Implementation<\/strong> \u2013 Who is responsible for what, and how quickly?<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]<strong>Differences from BCM \u2013 and why all three concepts must work together<\/strong><\/p>\n<p>Although BCM, emergency management, and crisis management overlap in terms of content, they have different perspectives:[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]<img decoding=\"async\" class=\"aligncenter size-full wp-image-1006201 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-scaled.png\" alt=\"\" width=\"2560\" height=\"640\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-scaled.png 2560w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-300x75.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-1024x256.png 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-768x192.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-1536x384.png 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-2048x512.png 2048w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-tabelle-teil2-700x175.png 700w\" data-sizes=\"(max-width: 2560px) 100vw, 2560px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 2560px; --smush-placeholder-aspect-ratio: 2560\/640;\" \/>[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Companies are well advised to identify suitable partners for emergencies at an early stage. Together with our partner HvS Consulting, we offer companies a comprehensive solution for dealing with IT emergencies and security incidents \u2013 from the initial alarm to complete technical resolution.<\/p>\n<p>IT emergencies and crises often hit companies faster and harder than expected. In such cases, it is crucial not only to react quickly, but also to take sustainable action \u2013 and this is exactly where our cooperation comes in.<\/p>\n<p><strong>Teal and HvS combine their expertise<\/strong> to provide companies with the best possible support throughout the entire incident lifecycle:<\/p>\n<p><strong>The roles at a glance:<\/strong><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>HvS specializes in incident detection and response:<br \/>\nThey make threats visible (Identify), increase resilience (Protect), detect attacks early (Detect), respond professionally in an emergency (Respond), and ensure initial stabilization after incidents (Recover).<br \/>\nImportant: HSV does not offer technical implementation of remediation measures \u2013 this requires the right implementation partner.<\/li>\n<\/ul>\n<\/li>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>This is where Teal comes in:<br \/>\nWe take care of remediation \u2013 i.e., the sustainable resolution of security incidents, closing vulnerabilities, hardening systems, and restoring secure operating conditions.<br \/>\nImportant: TEAL does not offer incident response, but implements targeted technical measures after the initial response.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Why this is a real advantage for you as a customer:<\/p>\n<p><strong>Combination of two strong portfolios<\/strong> \u2013 seamless, without overlapping competencies<br \/>\n<strong>Clear division of tasks<\/strong>: HVS detects &amp; responds, TEAL implements sustainably<br \/>\n<strong>Higher service level<\/strong> through well-coordinated cooperation<br \/>\n<strong>One contact person<\/strong> \u2013 full coverage in the event of a crisis and beyond[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Our goal is to work together to offer a mutually enhanced service\u2014for greater security, less downtime, and IT operations that not only function again but emerge from the incident noticeably stronger.<\/p>\n<p>Both <strong>recognition by technical experts and proven performance<\/strong> in practice are at the top of the scale \u2013 a clear sign of how essential this area of action has become for modern IT security strategy.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1006190 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-5-teil2.png\" alt=\"\" width=\"845\" height=\"554\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-5-teil2.png 845w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-5-teil2-300x197.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-5-teil2-768x504.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-5-teil2-700x459.png 700w\" data-sizes=\"(max-width: 845px) 100vw, 845px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 845px; --smush-placeholder-aspect-ratio: 845\/554;\" \/>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h3>(3.3.20) Technical safety inspection<\/h3>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Certified companies are accustomed to conducting regular audits to meet regulatory requirements such as ISO 27001, TISAX, DORA, NIS2, or KRITIS. However, these audits often focus on reviewing processes, while technical aspects are usually only considered marginally and examined superficially.<\/p>\n<p>For this reason, the guide recommends supplementing established process reviews with in-depth technical analyses.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1006192 lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-6-teil2.png\" alt=\"\" width=\"845\" height=\"554\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-6-teil2.png 845w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-6-teil2-300x197.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-6-teil2-768x504.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/07\/teletrust-grafik-6-teil2-700x459.png 700w\" data-sizes=\"(max-width: 845px) 100vw, 845px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 845px; --smush-placeholder-aspect-ratio: 845\/554;\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>In addition to configuration analyses and system hardening measures, regular vulnerability scans and penetration tests are also recommended. The latter in particular are already established in many organizations and are an integral part of their security strategy.<\/p>\n<p>However, we repeatedly notice that the identified vulnerabilities are often not consistently remedied, and the results of the penetration tests are often ignored. Instead of structured follow-up, the reports end up in a drawer \u2013 if anything, only the obvious weaknesses, the so-called \u2018low-hanging fruits\u2019, are addressed.<\/p>\n<p>In our view, this approach poses a significant security risk and lulls those responsible into a false sense of security.<\/p>\n<p>Instead, IT security managers should insist on continuously working on vulnerabilities and eliminating them. For example, we rely on the following regular checks and mitigations for our customers:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>Pingcastle Check and eliminate at least one vulnerability<\/li>\n<li>Bloodhound Collect and evaluate data<\/li>\n<li>Evaluate password quality with DSInternals<\/li>\n<li>Set administrative account to \u201cIs sensitive and cannot be delegated\u201dSet domain admins as owners of all AD objects<\/li>\n<li>Set domain admins as owners of all GPOs<\/li>\n<li>Check permissions on all GPOs<\/li>\n<li>Change KRBTGT password<\/li>\n<li>Change built-in administrator password<\/li>\n<li>Change DSRM passwords<\/li>\n<li>Identify \u201cstale\u201d computers<\/li>\n<li>Identify \u201cstale\u201d usersCheck membership of defined high privilege groups<\/li>\n<li>PKI check<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]By performing these steps on a monthly basis, you will not only stabilize and improve your IT security, but also identify new vulnerabilities at an early stage.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;50&#8243;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221;][vc_column_inner][vc_column_text css=&#8221;&#8221;]\n<h2>Conclusion<\/h2>\n[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]<strong><img decoding=\"async\" class=\"wp-image-1006158 alignleft lazyload\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI.png\" alt=\"\" width=\"288\" height=\"288\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI.png 1600w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-300x300.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-1024x1024.png 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-150x150.png 150w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-768x768.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-1536x1536.png 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-570x570.png 570w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-500x500.png 500w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-1000x1000.png 1000w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/06\/Schluesselanhaenger-TAVI-700x700.png 700w\" data-sizes=\"(max-width: 288px) 100vw, 288px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 288px; --smush-placeholder-aspect-ratio: 288\/288;\" \/>Now is the right time to act<br \/>\n<\/strong><\/p>\n<p>The new \u201cState of the Art\u201d report clearly shows that IT security is not a one-time project, but rather a continuous process. Companies must not only comply with legal requirements\u2014they must actively protect their systems against current threats. And this is precisely where we at <strong>Teal<\/strong> come in.<\/p>\n<p>We help you identify the right measures, implement them professionally, and continuously improve them\u2014whether it&#8217;s monitoring and protecting directory services, system hardening, cloud security, business continuity, or secure authentication. Together, we bring your IT to a modern, regulatory-compliant, and above all, secure level.<\/p>\n<p><strong>Get in touch with us!<\/strong>[\/vc_column_text][vc_empty_space height=&#8221;20&#8243;][vc_column_text css=&#8221;&#8221;]Whether you are just starting out or want to update your existing security concept, we support you with sound advice, proven tools, and many years of practical experience. <strong>Teal is your point of contact for identity protection.<\/strong>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;100&#8243;][vc_raw_html css=&#8221;&#8221;]JTNDYSUyMGhyZWYlM0QlMjJqYXZhc2NyaXB0JTNBaGlzdG9yeS5iYWNrJTI4JTI5JTIyJTNFJTNDc3BhbiUyMHN0eWxlJTNEJTIyY29sb3IlM0ElMjAlMjNmZjIwNzAlM0IlMjIlM0UlM0MlM0MlMjBCYWNrJTNDJTJGc3BhbiUzRSUzQyUyRmElM0U=[\/vc_raw_html][vc_empty_space height=&#8221;50&#8243;][vc_separator type=&#8221;small&#8221; position=&#8221;center&#8221; color=&#8221;#eeeeee&#8221; thickness=&#8221;2&#8243; width=&#8221;1100&#8243;][vc_empty_space height=&#8221;50&#8243;][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space height=&#8221;30&#8243;][vc_column_text]\n<h4>LATEST POSTS<\/h4>\n[\/vc_column_text][vc_empty_space height=&#8221;30&#8243;]\n<div class='latest_post_holder boxes three_columns one_row' >\n    <ul>\n    \n        <li class=\"clearfix\">\n            <div class=\"boxes_image\">\n                                <a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/09\/02\/tiering-isnt-dead\/\"><img decoding=\"async\" width=\"539\" height=\"303\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-539x303.jpg\" class=\"attachment-latest_post_boxes size-latest_post_boxes wp-post-image lazyload\" alt=\"\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-539x303.jpg 539w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-300x169.jpg 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-1024x575.jpg 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-768x432.jpg 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-1536x863.jpg 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-700x393.jpg 700w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows.jpg 1920w\" data-sizes=\"(max-width: 539px) 100vw, 539px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 539px; --smush-placeholder-aspect-ratio: 539\/303;\"><\/a>\n            <\/div>\n            <div class=\"latest_post\"  >\n                <div class=\"latest_post_text\">\n                    <div class=\"latest_post_inner\">\n                        <div class=\"latest_post_text_inner\">\n                            <h4 itemprop=\"name\" class=\"latest_post_title entry_title\"><a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/09\/02\/tiering-isnt-dead\/\">Microsoft is backtracking: Tiering isn&#8217;t dead\u2014it&#8217;s essential for survival<\/a><\/h4>\n                            <p class=\"excerpt\">Microsoft releases an Active Directory Tier Model on GitHub. To many, this sounds like just another tool. For us, it\u2019s official proof of something we\u2019ve been saying for years: if you don\u2019t strictly isolate ...<\/p>\n                            <span class=\"post_infos\">\n                                                                    <span class=\"date_hour_holder\">\n                                        <span itemprop=\"dateCreated\" class=\"date entry_date updated\">02 September, 2026 <meta itemprop=\"interactionCount\" content=\"UserComments: 0\"\/><\/span>\n                                    <\/span>\n                                                                                                \n                                \n                                                            <\/span>\n                        <\/div>\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/li>\n    \n        <li class=\"clearfix\">\n            <div class=\"boxes_image\">\n                                <a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/08\/06\/microsoft-sms-mfa-obsolete\/\"><img decoding=\"async\" width=\"539\" height=\"303\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-539x303.jpg\" class=\"attachment-latest_post_boxes size-latest_post_boxes wp-post-image lazyload\" alt=\"\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-539x303.jpg 539w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-300x169.jpg 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-1024x575.jpg 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-768x432.jpg 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-1536x863.jpg 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows-700x393.jpg 700w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2025\/10\/blog_header_microsoft-windows.jpg 1920w\" data-sizes=\"(max-width: 539px) 100vw, 539px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 539px; --smush-placeholder-aspect-ratio: 539\/303;\"><\/a>\n            <\/div>\n            <div class=\"latest_post\"  >\n                <div class=\"latest_post_text\">\n                    <div class=\"latest_post_inner\">\n                        <div class=\"latest_post_text_inner\">\n                            <h4 itemprop=\"name\" class=\"latest_post_title entry_title\"><a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/08\/06\/microsoft-sms-mfa-obsolete\/\">Microsoft pulls the plug: why SMS MFA is now finally obsolete<\/a><\/h4>\n                            <p class=\"excerpt\">Starting September 1, 2026, passkeys will gradually become the default authentication method in Microsoft Entra ID. At the same time, Microsoft has announced that it will discontinue native support for SMS and voice MFA....<\/p>\n                            <span class=\"post_infos\">\n                                                                    <span class=\"date_hour_holder\">\n                                        <span itemprop=\"dateCreated\" class=\"date entry_date updated\">06 August, 2026 <meta itemprop=\"interactionCount\" content=\"UserComments: 0\"\/><\/span>\n                                    <\/span>\n                                                                                                \n                                \n                                                            <\/span>\n                        <\/div>\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/li>\n    \n        <li class=\"clearfix\">\n            <div class=\"boxes_image\">\n                                <a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/07\/01\/one-click-desaster-in-microsoft-365-copilot\/\"><img decoding=\"async\" width=\"539\" height=\"303\" data-src=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot-539x303.png\" class=\"attachment-latest_post_boxes size-latest_post_boxes wp-post-image lazyload\" alt=\"\" data-srcset=\"https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot-539x303.png 539w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot-300x169.png 300w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot-1024x575.png 1024w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot-768x432.png 768w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot-1536x863.png 1536w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot-700x393.png 700w, https:\/\/www.teal-consulting.de\/wp-content\/uploads\/2026\/06\/header_blog_teal_copilot.png 1920w\" data-sizes=\"(max-width: 539px) 100vw, 539px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 539px; --smush-placeholder-aspect-ratio: 539\/303;\"><\/a>\n            <\/div>\n            <div class=\"latest_post\"  >\n                <div class=\"latest_post_text\">\n                    <div class=\"latest_post_inner\">\n                        <div class=\"latest_post_text_inner\">\n                            <h4 itemprop=\"name\" class=\"latest_post_title entry_title\"><a itemprop=\"url\" href=\"https:\/\/www.teal-consulting.de\/en\/2026\/07\/01\/one-click-desaster-in-microsoft-365-copilot\/\">One-Click Disaster in Microsoft 365 Copilot: When AI becomes a hacker&#8217;s best friend<\/a><\/h4>\n                            <p class=\"excerpt\">AI agents like Microsoft 365 Copilot are revolutionizing our daily work and promise unprecedented productivity. But what happens if this very smart assistant system quietly turns into the ultimate spy? ...<\/p>\n                            <span class=\"post_infos\">\n                                                                    <span class=\"date_hour_holder\">\n                                        <span itemprop=\"dateCreated\" class=\"date entry_date updated\">01 July, 2026 <meta itemprop=\"interactionCount\" content=\"UserComments: 0\"\/><\/span>\n                                    <\/span>\n                                                                                                \n                                \n                                                            <\/span>\n                        <\/div>\n                    <\/div>\n                <\/div>\n            <\/div>\n        <\/li>\n        <\/ul>\n<\/div>[\/vc_column][\/vc_row]\n<\/div>","protected":false},"excerpt":{"rendered":"<p>PART 2: Many successful cyberattacks\u2014whether carried out by state-sponsored groups or professional cybercriminals\u2014have one thing in common: they exploit compromised user accounts. The attack often begins with a single access point.<\/p>\n","protected":false},"author":14,"featured_media":1006181,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[10],"tags":[],"class_list":["post-1006204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts\/1006204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/comments?post=1006204"}],"version-history":[{"count":5,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts\/1006204\/revisions"}],"predecessor-version":[{"id":1006209,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/posts\/1006204\/revisions\/1006209"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/media\/1006181"}],"wp:attachment":[{"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/media?parent=1006204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/categories?post=1006204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.teal-consulting.de\/en\/wp-json\/wp\/v2\/tags?post=1006204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}