Owner and Managing Director

• Support in implementing the requirements of §8a of the BSI Act for critical infrastructures.
• Systematic preparation and support of internal and external audits, resolution of previous non-conformities (HA, NA, VP).
• Implementation of the specific requirements of the IT Security Catalog.
• Development of training programs, creation of run books and conducting assessments to ensure operational effectiveness.

• Implementing a central log management system to meet KRITIS requirements in energy supply
• Serving as the workstream lead for collecting, extracting and aggregating log data from selected power plants
• Installing and configuring security components such as the genua cyber diode and SYSLOG to ensure logging

• Horizon scan: designing a trend analysis for IT emergency management using prelead

• Responsibility for setting up the project and managing delivery to the finish line
• Analysis of the program's and project's challenges and risks
• Definition of an effective approach
• Restructuring and mobilizing colleagues and partner staff
• Support for the newly organized cybersecurity department on its path to the next level of operational maturity (e.g., evolution into a customer-focused, standardized, and sustainable organization)

Audit support for the world's second-largest transportation company. Assessment and completion of the information security policies and the documentation framework for IDW and BSI audit standards.

• Support for the 2nd Line of Defense in building and operating an Information Security Management System (ISMS) according to ISO 27001
• Creation and maintenance of policies, processes, and other (framework) documents (e.g., work instructions and manuals)
• Co-development of the information security strategy
• Support in information security risk management
• Implementation of measures to eliminate/mitigate information security risks and deficiencies
• Preparation for the next §8a audit cycle (2023)
• Coordination with departments to identify KRITIS-relevant assets
• Creation of a scope document for KRITIS-relevant assets
• Collection and preparation of evidence

Development and implementation of several BSI IT-Grundschutz projects for state ministries in North Rhine-Westphalia and for federal authorities.

• Project manager for the introduction and maintenance of a quality management system according to ISO 9001 for consulting, auditing and training in information security, risk management, data protection and BCM
• Transition manager for the team change of 120 employees
• Key expert for OT security and general consultant for technical aspects of cyber security in the energy sector and other industries

• Supported requirements engineering and technical implementation for the OneDMS document management system
• Managed organizational change to develop a cybersecurity interface (creating policies, implementing technical requirements, awareness training, ticket management, supporting business projects with cybersecurity aspects and requirements)
• Managed internal and external audits as well as supplier audits according to ISO 27001, ISO 27002 and ISO 27019 (per IT security catalog)
• Supported the CISO, assessed protection needs and monitored cybersecurity aspects for IT and OT

• Study on “ISMS in the Energy Sector 2018”
• In-house implementation of GDPR and ITIL-based services

• Supported the Group CISO in governance, processes and awareness, incident management, strategic management, and technical questions in the energy sector

• Location management study to overcome vacancies in industrial parks in the Lusatia energy region. Conducted for Vattenfall Europe Generation AG and the Lusatia Spreewald Energy Region
• Market analysis of the Bavarian, Brandenburg, and Saxon tourism markets to derive suitable market entry strategies
• Fundraising for the 20th anniversary event of Brandenburg University of Technology Cottbus
• Lectures on eBusiness, international marketing, and market-oriented product development

Part of the Fraunhofer Institute for Material Flow and Logistics IML.

• Implemented real-time tracking systems in complex industrial environments using ubisense
• Assessed physical security at Sheremetyevo Cargo Airport in Moscow, Russia
• Provided user support for the Fraunhofer Public Key Infrastructure
• Developed an application for digital anamnesis for online/offline use by emergency services using .NET/C#/HTML and PRINCE2 (ADAC)
• Developed and promoted an EU-wide injury database (IDB)
• Managed events for the "Night of Creative Minds" science roadshow
• Provided organizational and technical assistance at the associated chair for Industrial IT