Successful implementation of a security management system

Vetter Pharma-Fertigung GmbH & Co. KG

Consulting and tendering for a digitalized access management system, taking KRITIS security requirements into account.

Goals and challenges

The aim was to implement a digital access management system at Vetter’s production sites in Germany, taking KRITIS security requirements into account. 

This includes special IT security requirements for the protection of critical infrastructures, e.g. in the healthcare sector in accordance with the BSI Act (Federal Office for Information Security). 

The focus was on digitalization and the integration of relevant organizational and management processes to improve operational efficiency and security. 

Challenges:

  • Strict security requirements in the pharmaceutical environment, especially in sensitive areas such as laboratories and cleanrooms 
  • Complex systems with numerous interfaces that needed to be integrated into the new access management system 
  • Process analysis and optimization as part of process re-engineering for optimal implementation in the new system 

Implementation

As part of the concept and planning phase, the requirements for the access concept were determined. This included a review and evaluation of the existing zone concept at the German sites. In a workshop, we collaborated with the client to refine the target, gather user requirements, and document the desired system functionalities and interfaces. 

Based on these insights, we developed a comprehensive requirements catalogue covering hardware, IT processes, and software—serving as a foundation for the qualitative assessment of the proposed services and products. 

Additionally, we supported Vetter in designing a revised zone concept, which included a risk assessment and the categorization of room types in accordance with KRITIS security guidelines. 

Next, we prepared the tender documents. This involved creating a shortlist of qualified vendors and compiling the necessary documentation for the tender process.
 

Results

We successfully supported Vetter throughout the implementation process by: 

  • Developing a targeted access, zoning, and authorization concept tailored to an environment with stringent security requirements 
  • Managing the tender process and identifying a qualified implementation partner 
  • AIS services

    Consulting and tendering Digital locking and security management system

  • Implementation

    2022 - 2024

Link to the project

What our customer says

From the very beginning, our collaboration with AIS Management was exceptionally professional and collaborative. Their expertise and advices complemented our project perfectly and helped us design our new access and security management system in an efficient and future-proof way.

Anja Remensperger

Project Manager

Vetter Pharma Fertigung GmbH & Co. KG

AIS Services

  • Consulting and development of the access control concept
  • Compatibility check with various hardware manufacturers of access readers/controllers, including currently deployed devices
  • Support in developing a modular authorization concept
  • Consulting on the digitalization of previously manual access management processes, including workflow or ticketing systems
  • Support during technical clarification meetings with potential bidders
  • Preparation of tender documents
  • Assistance throughout the tendering process and selection of a suitable implementation partner
  • Consulting and support in evaluating the quality of submitted proposals
  • Targeted support in preparing for the implementation phase