Data security and data protection are becoming increasingly important

In today’s world, company data is of inestimable value. Your data is not only subject to various legal regulations such as the GDPR, BSI IT-Grundschutz or ISO/IEC 27001, but also to strict security requirements. To protect your data from external and internal attackers, effective protective measures are required that are also economically viable. In order to optimise the information security management system (ISMS), it is essential to set clear priorities. These priorities must be based on the probability of occurrence and the negative consequences of IT security risks.

Companies in the areas of finance, health and the public sector have a special responsibility. It is essential that they fulfil the compliance requirements, implement the defined measures and review them regularly.

Independent & Neutral

I analyse your existing processes to strengthen your information security management system (ISMS). My advice is based on recognised standards such as BSI IT-Grundschutz, ISO/IEC 27001 and the new DIN SPEC 27076. As an independent IT consultant, I give you objective recommendations. I also know the commercial and free products that can increase your data security and can assess if they would solve some of your security challenges. My recommendations are focused exclusively on the success of your company. I have no interest in selling you overpriced or unsuitable solutions.

Germany-wide consulting - flexible and digital

I offer my services throughout Germany - online and without the need for a face-to-face meeting. This allows companies from all over Germany to benefit from my expertise in data security and data protection, conveniently and efficiently.

Facts and figures

Over 15 years of experience in IT security, network and general data security and database security I have many years of experience in the defining, prioritization and implementation of security measures in e-commerce systems in German corporations

• In more than 11 successful projects: I have strengthened platforms for B2B and B2C clients, including well-known companies such as:
  • a European pet supplies chain,
  • a manufacturer of security products,
  • a European food group,
  • a trading company for window, door and façade systems,
  • an agricultural group,
  • as well as a purchasing association of medium-sized trading companies
• Many years of practical experience in IT operations as an architect, product owner, team lead and developer. In the course of my work, I have already worked with IT managers, IT security officers and data protection officers

My focus areas

As an independent IT consultant, I am an expert in data security and data protection. My expertise includes:

• avoiding data leaks from external attackers and from the use of compromised accounts from administrators and other highly privileged users. Auditing and security software can definitely minimise these risks. They identify all access to sensitive data and block new connections
• Strengthen your organisation’s data security by implementing low-cost but effective measures as part of your Information Security Management System (ISMS). The ISMS covers the entire organisation, but also external partners such as IT service providers
• Analysis after a data leak to find out how the data was stolen and to close weak spots. I will of course assist you in communicating with the authorities
• Conduct an independent external review of the implementation of the defined measures. For example, it is crucial that we find out whether restricted accounts are being used and how attacks on web applications are being minimised
• Analyse the source-code and the architecture of existing applications
• Optimise your security concept based on the ISO/IEC 27001, BSI IT-Grundschutz, and DIN SPEC 27076. Updating your ITMS due to new legal requirements
• Analysing migrations to the cloud from the perspective of data security, data protection and IT architecture

Contact me

Get in touch with me quickly and easily using this contact form.