Hybrid Cloud

Public Cloud

Multi Cloud

Private Cloud

ADESTIS Cloud

Sovereign Cloud

Backup-as-a-Service (BaaS)

Disaster-Recovery-as-a-Service (DRaaS)

Business Continuity

DevOps

Kubernetes-as-a-Service

Kubernetes

Software

Services

Lenovo

Sangfor

Avolens

Premium Partners

Technology Partners

Partner

Certification

Managementpolicy

The Company

About us

Career

Contact

Privacy Policy

Imprint


_Why Action Is Urgently Needed_

The digital threat landscape facing German public authorities is expanding rapidly. A recent report by the Federal Court of Auditors makes it clear: the IT systems of the federal administration are insufficiently protected. Even basic security standards remain unmet. Especially concerning is the shortage of qualified personnel. More than 2,000 IT positions are vacant, many of them in security-critical areas.

---

At the same time, cyberattacks are becoming more sophisticated, particularly with the growing use of artificial intelligence. Generative models are producing highly convincing phishing emails. AI-powered tools are scanning for vulnerabilities automatically. Traditional defense systems are struggling to keep up. Threats are evolving faster, hitting harder, and spreading more efficiently.

## NIS-2 Raises the Bar

The new EU directive NIS-2 introduces stricter cybersecurity requirements. Multi-factor authentication, encryption, network segmentation, and robust crisis response strategies are now mandatory. Failure to act swiftly risks not only regulatory fines but also significant security gaps.

## The Way Forward: Strong Technology and Operational Relief

ADESTIS is a seasoned cloud service provider with deep experience in mission-critical infrastructures. Certified to **ISO/IEC 27001**, **IDW PS 951 Type 2**, **ISAE 3402 Type 2**, and awarded the **CrefoZert**, ADESTIS undergoes regular external audits that verify the reliability of its security processes, operational integrity, and financial stability. This means it offers not just technology, security, and reliability, but a complete solution:

**1. Security by Design**

Working with trusted partners such as VMware, Microsoft, and Sangfor, ADESTIS builds on a zero-trust architecture from the ground up. Access controls, network microsegmentation, and encrypted communication are standard. Backup and disaster recovery solutions from Veeam and Zerto ensure rapid restoration in case of disruption.

**2. Intelligent Threat Detection**

By integrating AI-based tools like Microsoft Defender and Azure Sentinel, previously unknown attacks can be detected early and blocked automatically. The system isolates compromised accounts, disconnects infected devices, and halts malicious traffic in real time.

**3. Relief Through Managed Security**

The shortage of qualified IT staff in the public sector cannot be solved overnight. As a third-level support partner and managed security provider, ADESTIS delivers fully integrated services. These include 24/7 monitoring, full security responsibility, incident escalation, and compliance documentation.

**4. One-Stop NIS-2 Compliance**

ADESTIS supports public institutions in implementing NIS-2 requirements from end to end. This includes infrastructure assessments, technical implementation, documentation, and continuous compliance monitoring. Proven tools and standards ensure the process is efficient and reliable.

## Why ADESTIS?

ADESTIS not only works with technology leaders such as Microsoft, VMware, Zerto, and Veeam, but also has deep expertise in their deployment. As a highly certified and trusted partner, ADESTIS operates at vendor level and integrates even complex systems seamlessly into existing environments.

**Three Key Recommendations for Public Sector Decision-Makers**

1. **Update your security strategy.** Review your setup against NIS-2 and implement changes with a partner that understands the public sector.
2. **Use automation.** AI-powered systems relieve pressure on your teams and detect threats before damage occurs.
3. **Rely on verified partners.** Work with providers who offer proven expertise and certifications, such as ADESTIS.

## Conclusion

Cybersecurity in the federal administration is under more pressure than ever. With NIS-2, security becomes a mandatory task. ADESTIS shows how technology, experienced security management, and regulatory compliance can be combined into a single approach. The result is infrastructure that is not only protected today but ready for tomorrow.

## Take Action Now

**Act before the next incident.** Have your IT infrastructure reviewed for NIS-2 compliance and find out how ADESTIS can help you build a secure and resilient system. Get in touch for an initial consultation, with no obligation.

2025-11

cyberthreats.md


_When data loss becomes existential_

Economic stability and resilience are critical for companies to stay in the market and remain competitive. Yet a single moment of carelessness can seriously endanger that goal.

---

An example to illustrate:

Imagine it’s 3:48 a.m. and, as the managing director of a mid-sized company, you receive an urgent call: “There was a fire at your company. The good news: the offices are intact. The bad news: the server room is badly damaged.” You worry about the high hardware costs now coming your way. Then it hits you: without an offsite backup, all customer data and vital corporate information are at risk. The question arises: could preventive safeguard measures have avoided this shock?

Many companies underestimate the consequences of data loss. The impacts range from massive revenue losses to reputational damage and even potential business closure – a risk that could be avoided with a proper data protection strategy. Statistics show that about 60% of companies suffering a significant data loss cease operations within the following six months.

## Potential financial burdens and legal consequences

Data loss can trigger operational and production outages, leading to financial damage and lost revenue. In addition, the loss of sensitive data can have serious legal and financial consequences: fines for loss of personal data, contractual penalties, and in some cases even personal liability claims against management. Given these risks, postponing data protection measures isn’t an option.

## Impact on reputation and customer relationships

The damage of data loss often goes far beyond the material: it presents a major reputational risk. Delayed projects, missed deadlines and unfulfilled delivery commitments erode trust with existing customers and deter potential new ones. Existing business relationships are also at risk: partners concerned about their data may demand stricter safeguards or reconsider the partnership.

## Prevention by experts

The solution? A strategic protection concept that in an emergency not only safeguards data but also ensures business continuity. At ADESTIS, every solution begins with individual consultation because the optimal model depends on your specific protection goals: can you tolerate some downtime and data loss – or do you require immediate availability?

Your Recovery Time Objective (RTO) and Recovery Point Objective (RPO) requirements set the course: together we determine whether Backup as a Service (BaaS) or Disaster Recovery as a Service (DRaaS) is the right choice.


2024-10

business-continuity.md


_Why geo-redundancy protects your data_

Football without substitutes? Dakar Rally without a spare tire? Scrap the emergency power supply? No. Redundant resources that can immediately jump in and take over in a crisis are vital to staying in the game, in the race – and sometimes alive. It’s no different for data centres.

---

Redundant components, redundant systems and even geo-redundant facilities are essential to minimise downtime of cloud-based databases and applications – and thus maximise their availability.

The failure of a data centre can have severe consequences for the reputation, operational capability and financial strength of affected companies: after all, many processes across nearly every industry today are data-driven – and the share of cloud applications continues to rise. Losing access to your own data means risking standstill, delivery issues and disappointed customers. In fact, 60% of companies that lose business‑critical data cease operations within six months of the loss.

## Why the substitute shouldn’t live next door

Geo‑redundancy for data centres isn’t just about cushioning downtime from planned maintenance and technical faults; it’s about ensuring business continuity and data availability during natural disasters, power outages and other damaging events that affect a broader geographic area.

Consider recent flood disasters and their massive infrastructure damage: the Elbe flood of 2002, the centennial floods of the Elbe and Danube in 2013, the catastrophic flooding in Rhineland-Palatinate and North Rhine-Westphalia in 2021, the Ahr Valley disaster in 2022, and most recently Bavaria and Baden-Württemberg in June 2024. When entire regions are underwater, it’s of little help if the geo‑redundant data centre is in the neighbouring town and also has to shut down. Likewise, during a power outage the redundant systems should obviously not sit in the same network segment as the affected primary environment.

The conclusion is clear: the physical distance of the geo‑redundant data centre must be large enough to be outside the impacted zone in an emergency.

## What the BSI says about distance

The German Federal Office for Information Security (BSI), in its “Criteria for the Site Selection of Highly Available and Geo‑Redundant Data Centres”, specifies that geo‑redundant data centres should be at least 200 km apart. Only in very rare individual cases may this distance be reduced after a prior risk analysis with written justification. Even then the distance should under no circumstances be less than 100 km.

## What this means for your own IT

What applies to commercial data centres also applies to in‑house data centres and IT systems. They face the same risks in disasters: data loss or data corruption. After cleaning up and repairing physical damage to buildings, grounds and infrastructure, companies are left asking how to proceed. Few organisations have the resources to duplicate their in‑house servers and operate a second remote site for regular data mirroring.

## How the ADESTIS Cloud solves the problem

Choosing a cloud provider like ADESTIS means choosing security: the ADESTIS Cloud can of course serve as a backup for internally hosted applications – geo‑redundant if the distance between the company and the ADESTIS data centre is sufficient.

Additionally, for all the reasons outlined above, we at ADESTIS rely on geo‑redundancy for our own data centres. No compromises on distance. All to achieve the highest possible availability and secure business continuity. On this basis our customers can also benefit from advanced business continuity models: Backup as a Service (BaaS) or Disaster Recovery as a Service (DRaaS). We’re here for you.


2024-09

geo-redundanz.md


In 2023, German law enforcement recorded 134,000 cybercrime incidents – a dramatic increase. The Federal Office for Information Security (BSI) assesses the digital threat landscape as higher than ever before.

---

Cyberattacks usually hit companies suddenly and unprepared, cause high financial losses, and endanger sensitive data. The answer? A proactive security strategy that minimizes risks and secures sustainable cloud usage.

## Prevention – a strong foundation for everyone involved

Comprehensive protection starts with a solid foundation: trained employees. Most security incidents can be traced back to simple mistakes such as weak passwords or the accidental opening of malicious emails. Training in data protection and cyber security turns employees into a strong first line of defense.

At the same time, using proactive security systems is crucial to identify and fend off threats early. Cloud security doesn’t begin at the moment of attack, but with secure system configuration and preventive maintenance that keeps technology and security features up to date. Both cloud providers and users share responsibility for data security – it can only be achieved through joint commitment.

## Cloud Security – a protective shield for data security and business continuity

Cloud security has a central mission: only authorized users gain access to company data. Security strategies such as microsegmentation and modern firewalls are used for this purpose. Microsegmentation controls and restricts network access between workloads in a company’s data centers or cloud environments, reducing the attack surface. At the same time, next-generation firewalls block threats with application-specific filters.

Data encryption is another cornerstone of cloud security – it ensures that sensitive information is only accessible to authorized individuals. Threat analyses that continuously monitor data traffic detect malware and other risks early, creating a robust security mesh. In an emergency, backups and recovery plans ensure seamless continuation of business operations.

Another key aspect is compliance with regulations and policies. This is where **ISO/IEC 27001 certification** comes into play: it’s clear proof that all processes are geared toward protecting sensitive data, enforcing access control, and continuously improving security measures.

## Flexible cloud solutions for individual security needs

In addition to **ISO/IEC 27001**, which we meet at ADESTIS, cloud security is firmly integrated into our solutions and covers comprehensive security requirements. Our measures include security controls at every layer: cloud security, workload security, and network security protect your entire infrastructure.

Automated lifecycle management reduces and eliminates manual tasks, minimizing risks from human error and preventing misconfigurations. End-to-end data encryption at rest and in transit shields sensitive information from unauthorized access. And a multilayer security concept extends protection through perimeter, distributed, and web application firewalls.

Whether Public, Private, Hybrid, or Multi-Cloud – with our ADESTIS solutions, your data security is in the best hands: demonstrated not only by our **ISO/IEC 27001** certification, but also by our certifications under **IDW PS 951 Type 2** and **ISAE 3402 Type 2**.


Are You
Ready?

Cyber Threats in Federal Administration

Business Continuity

Geo-Redundancy

Security Measures for Good Reason

Are You Ready?

Cyber Threats in Federal Administration

Business Continuity

Geo-Redundancy

Security Measures for Good Reason

Are You
Ready?