KR Krisensicher Risikoberatung GmbH

What KR Krisensicher Risikoberatung GmbH does

KR Krisensicher Risikoberatung GmbH is a German boutique advisory firm founded in 2019 by Rico Kerstan, specializing in crisis management, organizational resilience, and security governance for mid-market companies and operators of critical infrastructure. The firm operates a solo-practitioner model in which Kerstan personally handles all client engagements, deliberately limiting the number of concurrent mandates to maintain direct, high-touch advisory relationships. Customer entry points are post-incident clarification, NIS2/KRITIS audit preparation, and pre-crisis readiness work, with crisis team exercises used as diagnostic instruments rather than events.

The firm's intellectual property centers on three proprietary methodologies — P-DRIVEN (problem-driven working principle for crises), C]ORE (Corporate Organizational Resilience Excellence), and M]ORE (Municipal Organizational Resilience Excellence) — supported by experimentally validated research at NBS Northern Business School Hamburg. The krisensicherOS open repository on GitHub extends these methods into AI-assisted security governance routines covering NIS2 scope, ISMS risks and controls, crisis escalation, and AI-mediated human gates. The technology stack is process- and methodology-driven rather than software-native; the open repository is a community artefact rather than a commercial product.

Revenue is generated through professional services (direct advisory, crisis team diagnosis, governance structuring, executive sparring, training) and a license partnership model that allows advisory firms to deploy the methodologies under exclusive regional or white-label arrangements. Pricing is not publicly disclosed and is set on a quote basis. The firm is founder-owned with no external capital, no disclosed subsidiaries, and no public listing. Geographic coverage is German-speaking DACH including Germany, Austria, and Switzerland.

Name

KR Krisensicher Risikoberatung GmbH

Legal name

KR Krisensicher Risikoberatung GmbH

Website

https://krisensicher-werden.de

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

KR Krisensicher Risikoberatung GmbH is a German boutique advisory firm advising mid-market companies and critical infrastructure operators on crisis management, organizational resilience, and NIS2/KRITIS governance, using proprietary methodologies (P-DRIVEN, C]ORE, M]ORE) and an open-source AI-assisted governance repository.

Ownership category

akta.pro rank

Product category

Crisis Management Consulting

NAICS

Management Consulting Services (54161), Other Computer Related Services (541519)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Business Continuity, Crisis Management & Resilience Planning (BPAKADAI)

akta.pro secondary industries

Business Continuity, Crisis Management & Operational Resilience (BPAHAFAK), Turnaround, Restructuring & Crisis Management Consulting (BPAHACAO)

Keywords

• Crisis management advisory
• Organizational resilience consulting
• NIS2 compliance consulting
• Critical infrastructure advisory
• Executive crisis sparring

Headquarters

HQ city

Lübben

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Crisis Management Advisory: Direct consulting for active crises, post-incident clarification, and governance pressure. Rico Kerstan works with a small number of organizations at a time on a confidential, direct basis without a consulting apparatus.
2. Crisis Team Diagnosis & Exercises: Diagnostic exercises for crisis team structure assessment, crisis response simulation, and role clarity under pressure. Results in action plans, not just exercise reports.
3. Governance & Resilience Structuring: Clarification work for NIS2 compliance, critical infrastructure governance, and ISMS. Focused on what fits the organization, what it actually needs, and what it should not build.
4. Executive Sparring: Direct advisory at leadership level for strategic decision-making, post-incident assessment, risk scenario planning, and organizational resilience strategy. Space for clarity without coaching or facilitation.
5. Training & Certification: Methodology transfer training, crisis management certification programs, executive training facilitation, and trainer certification for organizations and consultants.
6. License Partnership: Licensing of P-DRIVEN methodology to advisory firms for their own clients or as part of their business model. Includes exclusive regional licensing, white-label solutions, and ongoing methodology IP usage with support.

Go-to-market motion2 records

Distribution channels2 records

Marketing channels3 records

Core offering

KR Krisensicher advises executives in active crises, after incidents, and on structural risks, providing confidential crisis management advisory, crisis team diagnosis exercises, and governance/resilience structuring for mid-market companies and critical infrastructure (KRITIS/NIS2) operators. Service delivery is built around three proprietary methodologies—P-DRIVEN, C]ORE, and M]ORE—and accompanied by an open-source AI-assisted governance repository (krisensicherOS) on GitHub.

Product overview

KR Krisensicher Risikoberatung GmbH offers a portfolio of crisis management and organizational resilience services built around three proprietary methodology frameworks (P-DRIVEN, C]ORE, and M]ORE) and an open operating repository called krisensicherOS. The core offering consists of crisis management exercises and executive crisis training as diagnostic instruments, governance and resilience structuring for KRITIS and NIS2 compliance, and executive sparring at leadership level. These are complemented by training programs and license partnerships for advisory firms. The krisensicherOS repository provides AI-assisted security governance capabilities for NIS2 readiness, ISMS management, crisis escalation, and AI gates.

Differentiator

Problem solved

Functional benefit

Brands

• krisensicherOS: An open operating repository for AI-assisted security governance: NIS2 readiness, ISMS basics, crisis readiness, evidence work, and management reviews as operable routines instead of document graveyards.

Products and services

• Crisis Management Advisory
• Crisis Team Diagnosis & Exercises
• Governance & Resilience Structuring (KRITIS + NIS2)
• Executive Sparring at Leadership Level
• Training & Crisis Management Certification
• License Partnership for Advisory Firms
• krisensicherOS

Quantifiable outcome

• P-DRIVEN team showed strongest improvements across observer-based criteria compared to experienced teams and teams trained with standard DV 100 methodology in controlled experiment
• +1 more outcomes

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature4 records

Scale indicators1 record

Recent moves6 records

Expansion highlights6 records

Direct peers

• plünow² GmbH: German boutique consulting firm specializing in crisis management, business continuity, and resilience advisory for mid-market and regulated organizations. Closely comparable in size, positioning, and German-language, mid-market focus to KR Krisensicher.
• HiSolutions AG: German consulting firm focused on information security, business continuity (ISO 22301), and crisis management for critical infrastructure operators and enterprise customers. Directly comparable on NIS2/KRITIS advisory and BCM services.
• Corporate Trust Business Risk & Crisis Management GmbH: Specialized German consultancy offering business risk, crisis management, and security advisory to mid-market and corporate clients. Comparable on crisis readiness, BCM, and regulatory-driven governance advisory.
• GeCat GmbH: German boutique advisory firm focused on corporate crisis management, business continuity, and resilience. Similar in size and methodology-led positioning to KR Krisensicher, targeting German mid-market and regulated organizations.

Others

• Deutsches Netzwerk Krisenmanagement (DNK) e.V. German industry association for crisis management practitioners, hosting research, events, and community for the domestic crisis management field. Adjacent ecosystem actor relevant to KR Krisensicher because it shapes the buyer and advisor community and standards.

Broad incumbents

• TÜV SÜD – Crisis Management & BCM Services: Large German certification and advisory body offering ISO 22301 certification, crisis management audits, and BCM services. Comparable on regulatory and ISO-driven advisory for KRITIS operators, but within a much broader testing, inspection and certification portfolio.
• PwC Germany – Crisis & Risk Practice: Big 4 advisory practice covering operational resilience, crisis management, NIS2 implementation, and KRITIS-related services. Competes for the same German regulated mid-market and enterprise mandates, but as part of a full-stack risk and compliance portfolio.
• KPMG Germany – Crisis & Resilience Advisory: Large global advisory practice offering crisis management, BCM, NIS2 readiness, and resilience services in Germany. Overlaps with KR Krisensicher on regulatory advisory but at much larger scale and broader portfolio.
• NTT DATA Deutschland – Risk, Security & Crisis Advisory: Large IT services and consulting provider in Germany with security, risk, and crisis management offerings aligned to NIS2 and KRITIS. Comparable on advisory scope but operates at significantly larger scale and as part of a global systems integrator.
• Deloitte Germany – Resilience & Crisis Management: Global consultancy with a German crisis management, BCM, and resilience practice addressing NIS2/KRITIS requirements. Direct overlap on enterprise resilience advisory, though delivered at much larger scale and with broader scope.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• GitHubgithub.com/KRKrisensicher/krisensicherOS
• LinkedInlinkedin.com/company/krisensicher

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about KR Krisensicher Risikoberatung GmbH