Home · IT consulting
IT consulting
In addition to hosting, we have worked for years on IT projects for credit institutions, financial IT service providers and data center operators. We take on project and program management as well as governance and risk topics. We also use language models to develop software and processes that are tailored to the individual organization and connected to its existing systems. This extends to use in live operation, including under supervisory audits.
Services
Eight areas in which we take on engagements, individually or in combination.
IT project and program management
Management of initiatives across departmental and national boundaries: setting up and leading task forces, coordinating nearshore and offshore teams, reporting to the steering committee and executive management.
Governance & Security
Setting up and reviewing governance processes, acting in the IT custodian role, supporting outsourcing in the sourcing process, security operations with SIEM, monitoring of highly privileged accounts.
IT Risk Management
Maintaining the risk register, remediating findings from supervisory audits, risk-based sample testing, reporting to risk committees.
Change and release management
Incident, change, problem and release management according to ITIL. Environment management, sprint and business releases, monitoring of agreed service levels.
Asset Management
Digital inventory management for devices and IT equipment, including their lifecycle. Onboarding of new IT assets from contract design and supplier selection through to production.
Process development
Analysis, redesign and introduction of processes according to ITIL and ISO 27001, with SCRUM, KANBAN, A3 and PDCA. Test data management including anonymization and synthetic test data.
Custom software development
Custom development where standard software does not fit: administration, billing, interfaces, automation. The software behind our own hosting is developed entirely in-house.
AI-assisted development and automation
Software and processes that are developed and automated with language models, built specifically for each client and connected to its systems. Details are in the section below.
AI-assisted development and automation
For each client, we develop the software that reflects its processes instead of adapting the organization to a standard product.
We use language models in the development work itself: for capturing and analyzing existing processes, for writing and reviewing code, and for migrating legacy systems that have grown over time. This considerably shortens the path from requirement to working software and makes custom development affordable even where it used to fail because of effort and budget. People review the result, make the decisions and are accountable for it.
Our own platform was built this way: server provisioning, billing, cancellation processing, domain management, monitoring and payment reconciliation run automatically in the background, without standard software.
Process capture and mapping
We capture the existing process, even if it is not documented anywhere, and map it in software. The software adapts to the organization, not the other way around.
Integration with existing systems
Interfaces to inventory management, ERP, accounting, ticket system, directory service or machine control. Where the vendor has not provided an interface, we build one via the database, file exchange or remote control of the user interface.
Automation of recurring work
Tasks that are currently done by hand every day, such as transferring data, matching receipts, creating reports and obtaining approvals, then run without manual intervention and only report back in exceptional cases.
Own infrastructure instead of a rented platform
On request, the systems are built on dedicated infrastructure: servers, data storage, backup, monitoring and access protection, in our data center in Germany or on the client's premises.
Operation of the language models
Depending on the protection requirements, in-house on your own hardware or with a provider. Before implementation, we agree in writing which data may leave the organization and which may not.
Handover or continued operation
The source code belongs to the client, including documentation and setup instructions. On request, we take over operation, maintenance and further development. This does not create any obligation to stay with us.
Projects
A selection of completed and ongoing engagements. We name clients only with their approval.
Central monitoring platform, credit institution
Setup of a group-wide observability platform as a new IT asset, replacing the existing monitoring. Contract volume of €3.6 million per year, negotiation and onboarding of all SaaS partners, management according to DORA and SRE, reporting to the steering committee and risk committee.
Replacement of the project management system, credit institution
Coordinated around 200 departments, surveyed 1,200 project owners, migrated about 250 projects to the new system in staggered sprints, accompanying communication to 6,500 employees.
Security operations center, financial IT service provider
Rule set for security monitoring in the SIEM, concept for monitoring highly privileged accounts, closing audit findings using a risk-based approach, reduction of false positives.
Second data center site, airline IT
Complete disaster recovery environment: 19 airlines in operation, 53 of 170 applications in the project scope, a team of up to 20 people at four locations in different time zones.
Network redundancy for around 8,000 servers
Second network connection per server during live data center operation. Maintenance windows coordinated directly with the affected customers, downtime within the agreed service levels.
Data protection in test and development environments
Removed personal data from non-production environments, implemented anonymization and built a synthetic test data pool for development and testing.
Standards, methods and regulation
We work in environments where documentation requirements apply. We are familiar with ITIL, ISO 27001, Prince2, SCRUM, KANBAN, A3 and PDCA in implementation, and with DORA, GDPR, PSD2 and IFRS9 on the regulatory side. We have supported audits by BaFin and the European Central Bank on the client side, from the finding through to its closure.
How we work
We define scope, effort and billing in writing before work begins. Billing is based on a daily rate, either as an all-in price or with travel expenses charged separately. Daily rates for on-site work are higher than for remote work. On request, we agree on a fixed price for a clearly defined scope instead.
We work remotely and on the client's premises, in German and in English. We accept engagements worldwide. We clarify availability, travel times and terms in advance for each individual case.
Projects are awarded both directly and through partners. We work with Bechtle, HAYS, Etengo and Michael Bailey Associates, among others, and can also be included in framework agreements and tenders through these channels.
For technical engagements, we can also take over the operation of the systems we have built, in our own data center or in the client's environment.
Inquiry
Please describe your project to us. You receive an assessment of effort and approach before any costs are incurred. A phone call is enough for an initial conversation.
+49 89 55063107
· weekdays 9 a.m. to 6 p.m.
info@glowfish.de