Information security is essential for businesses handling EU citizens' data under GDPR, which protects against cyber attacks and ensures proper data processing.
As more companies invest in professional security assessments, we present a case study of Information Security and GDPR assessments provided for international web hosting provider Hostinger.
Hostinger is a customer-obsessed, idea-driven web hosting provider recognised as the fastest-growing hosting brand in 2020. The company provides top-notch web hosting services and technology, allowing people around the globe to unlock the power of the internet and acquire the freedom to learn, create, and grow.
For Hostinger, which stores much information of its clients from businesses and individuals, it is crucial to guarantee solid information security not only of its clients' data but also of its customers' data. Moreover, the company operates within the EU, where data protection and privacy are ensured by the GDPR. Therefore, professional GDPR Compliance and Information Security assessments are needed to prevent any possible cyber-attack or internal data breach.
Hostinger looked for a partner that could offer a team of certified IT security experts with proven GDPR and information security expertise. Thus, Baltic Amadeus has proposed executing two assessments to evaluate Hostinger's IT infrastructure security and GDPR compliance and provide an action plan to remove any found threats and risks.


During the 2 months, Baltic Amadeus provided a comprehensive IT security assessment divided into three main steps: organising needed information; reviewing and evaluating provided documentation; delivering a report document with the findings and recommendations.
Throughout the process, the Baltic Amadeus executed Information Security Controls, their compliance with ISO/IEC 27001, 27002, GDPR requirements and CSA Cloud Controls Matrix.
In the final stage, the Baltic Amadeus team presented a final report, enabling the Hostinger team to clearly understand their IT security situation. With the report, the Baltic Amadeus team explained identified threats, risks, priorities, and recommendations for treating identified IT security vulnerabilities.
Experts, who have carefully implemented an in-depth assessment process, hold many years of expertise in the IT security field. Their experience includes Information Security management, IT Security risk management, IT Security Architecture, ISO 27001 implementation, IT Security audits and assessments, Information Security awareness training, Penetration testing, Vulnerability assessments, and more.
In addition, the assessment team's competencies are proven by various international certificates such as CISA, CISSP, CDPSE, TOGAF, ITIL, CompTIA Security+, CEH, OSCP and CompTIA Pentest+.
The full spectrum of expertise proved the highest quality of the provided GDPR and Information Security assessments.
