The core tasks of many companies often have nothing to do with IT architecture, cloud strategies or network security. Often, the necessary capacities or expertise are not available to deal with these challenging topics in an appropriate manner. The area of IT security must not be neglected, after all, cybercrime is omnipresent and can endanger the functionality, reputation and even existence of any company. We show the best possible options for renewing and optimising the IT architecture and reducing operating costs at the same time. Existing, but also new information technolo-gies and an all-encompassing digitalisation require a thorough security assessment or security audit to identify possible weak points and points of attack and to eliminate or secure them. Anyone who wants to harmonise technology strategies with business and process strat-egies and needs strategic, architectural, and operational implementation advice and planning is well advised to make use of IT consulting.