Cyber defense, cyber security, and cyber resilience are now key issues in IT management and personal liability. What matters is not whether attacks occur, but whether your company can detect them, respond in a controlled manner, and safely restore operations.
The Triad
I develop strategies and programs that work in everyday life: with governance, clear responsibilities, and robust metrics. Not certificates to file away, but proven resilience in the face of crises.
01
Hardening, identities, access controls, segmentation, patch and vulnerability management as an operational discipline. Define and protect crown jewels.
02
For an attack to be detected, the company must record and analyze the right traces. I ensure that suspicious activities are detected early, properly classified, and addressed according to a clear emergency plan—with full transparency until it is determined how the incident occurred.
03
Backup strategy, recovery, disaster recovery, crisis management. Restore tests instead of romanticizing backups. Realistic and verified RTO and RPO.
04
Regulatory requirements as part of responsible architecture, not as an isolated compliance exercise.
05
RACI: Who decides, who is responsible, who delivers? Risk register, policies, exception processes, auditability.
06
In the supply chain, the partner with the least security is the primary target. Risks associated with suppliers and service providers are managed.
Procedure
Phase 1 · 30–45 days
Phase 2 · 60–120 days
Phase 3 · ongoing
Phase 4 · Culture
Documents
Restore operations within 48 hours following a ransomware incident.
High-Security Environment 2026
Leadership of a task force focused on approved system solutions for classified information across all classification levels.
Critical Infrastructure
Resilience program to address (state-sponsored) threat scenarios and ensure operational capability in the event of an emergency.