We have used our many years of experience from IT audits and summarized the BSI's basic protection catalogues in almost 200 questions. The essence was preserved. Our audit includes all topics that are relevant for IT security in medium-sized companies: Data protection, antivirus, employee awareness, data backup, firewall, servers, endpoint security, switches, patch management, monitoring, IT security management, etc. We have also subjected the existing standard audit procedures to a pragmatic revolution in terms of approach, thus creating a functional solution for SMEs. Instead of first inventorying every PC, every software and license, every line and every network device, then carrying out a protection needs analysis and risk analysis over days ...