Projects and references

14 distribution centres from 10,000 to 40,000 m² in live operation, with three new-build projects in the Netherlands and Belgium running in parallel.

Overall responsibility for the IT infrastructure of all 14 sites: planning, projects, live operations. Project management for the three new builds from the planning phase to final acceptance with responsibility for budget, schedule and quality. Planning and delivery of the complete IT in the new builds: server room with redundant site interconnection to head office, structured cabling, network core, WLAN coverage across picking, loading bay and offices. Coordination of all trades – electrical, network installation, building services – through milestone reviews, on-site inspections and partial acceptance. Contract management with suppliers: performance review, variation negotiations, rework coordination. Rollout of new mobile data capture devices to group standard.

Three new builds handed over at final acceptance and transferred into regular operation. Warehouse IT in European cross-dock sites from 2,000 to 6,000 m² aligned to group standard.

Network core, fibre optics, structured cabling, WLAN planning, server room design, redundant WAN connectivity, mobile data capture

First-time BSI C5 attestation of a cloud platform, with a Big Four audit firm as external auditor.

Steering the programme from the gap position towards the attestation, leading interdisciplinary teams from compliance, organisation and internal audit. Working through the complete criteria catalogue criterion by criterion with the auditor: interpretation clarified, test conditions and evidence expectations agreed for each control. Mapping against the existing ISO 27001/27002 control set, gap analysis, derivation of remediation measures. Translation of the criteria into concrete technical requirements for platform, infrastructure and security teams.

The programme led through to audit readiness and handed over into new hands before the final phase was complete. The attestation was achieved; ISO 27001 control mechanisms and audit processes had by that point already been established as a recurring routine rather than a one-off exercise.

BSI C5, ISO 27001/27002, ISMS, audit and evidence management, Jira, Confluence, ServiceNow

Companies with up to 120 employees from retail, industry and services. No internal head of IT in place.

IT roadmap aligned with business planning, investment and budget responsibility, system selection and lifecycle planning. Operation of servers, network and workstations: monitoring, backup and restore testing, patch management, incident resolution, user support. Infrastructure from cabling through virtualisation to site interconnection and home-office connectivity. Security: firewalls, VPN and segmentation, system hardening, endpoint protection, threat detection, mobile device management. Tendering, bid evaluation and management of external service providers.

Over 99 % availability with proactive monitoring. Multi-year engagements without a change of provider.

Proxmox, Nextcloud, Fortinet, Securepoint, ESET, Cynet, MDM, and others

Mid-sized companies without their own data protection function.

DSMS and ISMS built independently end to end: policy framework, control design, technical implementation together with the client's IT, record of processing activities, technical and organisational measures, staff training, audit documentation.

Multi-year engagements, audit-ready documentation.

IT infrastructure and store hardware of two retail chains of an international group, around 14,000 stores.

Product certification workflow for new hardware components designed and introduced. Network security in the stores established, structural and IT implementation optimised. Rollout coordination with technical suppliers under international group requirements.

Basis for the cross-border standardisation of new hardware.

Mid-sized companies with organically grown system landscapes.

System selection, implementation and migration with ERPframe and DOCUframe (GSD Software), ERPnext, Dolibarr, Odoo and Equinox. Data modelling, data cleansing and migration, interface integration via EDI and to web shops, document management, time and production data capture. Process analysis and workflow automation, most recently with n8n and AI-supported tools.

Sales processes roughly 40 % faster, technical service roughly 50 % more efficient. In the reorganisation of the administration and IT of a construction company, more than 30 % savings in personnel costs.