Alexander (Dr.) Sänn

• Support for implementing the requirements of § 8a of the BSI Act for critical infrastructures.
• Systematic preparation and support for internal and external audits, resolution of previous deviations (HA, NA, VP).
• Implementation of the specific requirements of the IT security catalog.
• Development of training, creation of run books and conducting assessments to ensure operational effectiveness.

• Implementation of a central log management system to meet KRITIS requirements in the energy sector
• Responsibility as workstream lead for collecting, extracting and aggregating log data from selected power plants
• Installation and configuration of security components, such as the genua cyber-diode and SYSLOG, to ensure logging

• Horizon scan: planning a trend analysis for IT emergency management using prelead

• Taking responsibility for setting up the project and managing delivery to the finish line
• Analyzing the challenges and risks of the program and project
• Defining an effective approach
• Restructuring and mobilizing colleagues and partner employees
• Supporting the newly organized cybersecurity department on its path to the next level of operational maturity (e.g., evolving into a customer-focused, standardized, and sustainable organization)

Audit support for the second-largest transport company in the world. Evaluating and completing the information security policies and documentation framework for IDW and BSI audit standards.

• Supporting the 2nd line of defense in establishing and operating an information security management system (ISMS) according to ISO 27001
• Creating and maintaining policies, processes, and other framework documents (e.g., work instructions and manuals)
• Contributing to the information security strategy
• Supporting information security risk management
• Implementing measures to eliminate or reduce information security risks and gaps
• Preparing for the next §8a audit cycle (2023)
• Coordination with departments to identify KRITIS-relevant assets
• Creating a scope document for KRITIS-relevant assets
• Collecting and preparing evidence

Developed and executed multiple BSI IT-Grundschutz projects for state ministries in North Rhine-Westphalia and for federal agencies.

• Project manager for the implementation and maintenance of a quality management system according to ISO 9001 for consulting, auditing and training in information security, risk management, data protection and BCM
• Transition manager for moving a team of 120 employees
• Key expert for OT security and general consultant on technical aspects of cyber security in the energy sector and other industries

• Support in requirements engineering and the technical implementation of the OneDMS document management system
• Manage organizational change to develop a cybersecurity interface (policy development, technical requirements implementation, awareness training, ticket management, support for business projects on cybersecurity aspects and requirements)
• Manage internal and external audits and supplier audits according to ISO 27001, ISO 27002 and ISO 27019 (based on the IT security catalogue)
• Support the CISO, assess protection needs and monitor cybersecurity aspects for IT and OT

• Study on "ISMS in the Energy Sector 2018"
• In-house implementation of GDPR and ITIL-oriented services

• Support for the Group CISO in governance, processes and awareness, incident management, strategic management and technical issues in the energy sector

• Study on site management to overcome vacancies in industrial parks in the Lausitz energy region. Study commissioned by Vattenfall Europe Generation AG and Energieregion Lausitz Spreewald
• Market analysis of the Bavarian, Brandenburg, and Saxon tourism markets to derive suitable market entry strategies
• Fundraising for the "20 Years of Brandenburg University of Technology Cottbus" event
• Lectures on eBusiness, international marketing, and market-oriented product development

Part of the Fraunhofer Institute for Material Flow and Logistics IML.

• Implementation of real-time tracking systems in complex industrial environments using Ubisense
• Assessment of physical security at Sheremetyevo Cargo Airport in Moscow, Russia
• User support for the Fraunhofer Public Key Infrastructure
• Application development for a digital medical history tool for online and offline use by emergency services with .NET/C#/HTML and PRINCE2 (ADAC)
• Development and promotion of an EU-wide injury database (IDB)
• Event management for the "Night of Creative Minds" – a science roadshow
• Organizational and technical assistance at the affiliated Chair of Industrial IT