Consultant in Information Security, Data Protection and Business Continuity Management

Consulting and support in gathering information security requirements (IT-SIG 2.0, KRITIS, TISAX, industry standards, ISO 27001, A-960/1)

Acting as data protection officer and auditor as well as information security auditor

Conducting employee training

Updating risk analyses with risk treatment

Designing information security concepts based on BSI IT Baseline Protection, KRITIS, ISO 27001, A-960/1 and TISAX

Identifying information security requirements for IT systems (WAN, LAN, clouds) and overseeing implementation

Administering the ISMS using Verinice and SAVe

Integrating security concepts into existing management systems according to ISO 9001 and ISO 27001

Process management and modeling according to ITIL

Management consulting for integrating an ISMS into integrated management systems

Advising on data protection (GDPR, BDSG)

Planning and conducting data protection audits

Designing risk management processes and methodologies according to ISO 27005, ISO 31000 and BSI 200-3

Developing and setting up training programs for employees