Andreas Rühl-Principal Consultant Information Security

Development and implementation of tailored information security strategies

Introduction and further development of ISMS according to ISO 27001, BSI baseline protection, and other standards

Risk management and creation of security concepts

Consulting for KRITIS, PCI DSS, TISAX, and VdS 3473/10000

Building and improving security organizations

Creation and implementation of guidelines, policies, work instructions, and process descriptions

Audit support and certification preparation

Conducting trainings, workshops, and awareness campaigns

Selection and consulting on the introduction of IT security solutions such as SIEM, DLP, IDS/IPS, firewalls, and encryption technologies

Conducting penetration tests and vulnerability analyses

Consulting on the selection, integration, and management of security architectures in complex IT environments

Consulting on ITSM and managed security services and SOC

Leading and managing complex projects to improve information security

Process analysis, optimization, and management according to ITIL, ISO 27001, and cybernetics

Introduction and quality assurance of management, documentation, and knowledge management systems

Support in complying with regulatory information security requirements (e.g. GDPR, HIPAA, SOX, GMP, KRITIS)

Development and implementation of risk analysis procedures

Organizing initial response, forensic investigations, and organizational measures in the event of security incidents

Designing and running targeted workshops on topics such as ISMS, IT risks, and current threat scenarios

Awareness campaigns to promote security culture in companies

Special trainings on ISO 27001, BSI baseline protection, KRITIS, and other relevant standards

Simulations and exercises to prepare for information security incidents

Interim management for leading information security projects or IT security organizations

Taking on the role of an external CISO (Chief Information Security Officer)

Support in developing and implementing IT security and corporate strategies

Coaching and mentoring of managers in the field of information security

Building and leading security departments as well as recruiting and qualifying employees

Temporary assumption of management responsibility in critical situations