This site measures reach exclusively on its own server, without cookies and without third parties.
ISO 27001, NIS2, the Cyber Resilience Act and cloud attestation – delivered with the engineers, not from the desk. Plus twenty years of IT project leadership, from mid-market companies to an international group. Based in the Stuttgart area, available for selected project and interim mandates across the EU.
I take responsibility where technology, organisation and regulation meet – and carry it through to the result.
Someone has to own the security – not just document it.
NIS2 is in force across the EU, the Cyber Resilience Act reports since September 2026, an audit is coming – and the board is liable. What is missing is the person who turns the standard into measures and talks to the auditor.
MoreA project has to be brought to completion.
The ERP has not gone live for months. The new building is up, the IT is not. The project management role is vacant or was never filled.
MoreOperations, projects, investment and evidence belong in one pair of hands.
The IT lead is vacant or overloaded. Operations, projects, investments and audit evidence continue regardless.
MoreCLOUD PLATFORM OF AN INTERNATIONAL RETAIL GROUP
Worked through the complete criteria catalogue criterion by criterion with the auditor, mapped it against the existing ISO 27001 control set, translated it into technical requirements. External auditor: a Big Four audit firm. C5 is the German federal cloud security standard, comparable in rigour to SOC 2.
INTERNATIONAL FOOD RETAIL GROUP · LOGISTICS IT
Overall responsibility for 14 sites ranging from 10,000 to 40,000 m². Three new builds in the Netherlands and Belgium from planning to final acceptance – server room, network core, WLAN, trade coordination, contract management with suppliers.
OWN CONSULTING PRACTICE
Over twenty years: system selection, data modelling, migration, interfaces. Sales processes roughly 40 % faster, technical service roughly 50 % more efficient, and in the reorganisation of a construction company more than 30 % savings in personnel costs.
BSI C5, ISO 27001, ISMS and DSMS development, audit management and evidence management, GDPR expertise from eight years as an external data protection officer, NIS2, the Cyber Resilience Act and the EU AI Act worked in
network planning, structured cabling, server rooms, WLAN surveys, WAN redundancy, trade coordination, partial and final acceptance
system selection, implementation and migration, data modelling and cleansing, EDI and web shop integration, document management
process analysis and standardisation, workflow automation with n8n, controlled use of AI with a framework and approval paths; more under Digitalisation & Processes
Looking to fill a permanent position in Germany? See the German site.
This site is for selected mandates with clear responsibility. If instead you need someone to look after your IT permanently – operations, support, managed services, ongoing data protection – then falocon Ltd is the right address. The company is run by Leonie Franz; I work there part-time until the end of 2026.
In a first conversation we establish what the situation is and whether I am the right person. If I am not, I will say so – that saves us both time.