Gabriele Bolek-Fügl-Founder and Managing Director

• Main tasks and responsibilities: development, acquisition, sales, consulting, and controlling
• Area of work or industry: Software as a Service in AI compliance and consulting

Selection of client projects:

• Creation and operation of an AI governance platform, including training content on the use of AI in companies
• Design, setup, and operation of the ISO 42001 management system at PaiperOne with certification by TÜV
• Auditor according to ISO 17024 at Austrian Standards for the "AI Manager"
• AI training for staff of two Austrian publishing groups
• AI training for the management level at the State of Lower Austria
• AI strategy workshop for a municipality in Styria and a municipality in Salzburg
• AI workshops for the House of Digitalization in Tulln
• AI training for municipalities at KDZ
• Delivery of training on "Certified AI Compliance Officer" at the Academy for Internal Audit
• Organizational consulting on AI governance at ÖGK
• Project support for the "homepage chatbot" at öbv
• Certification exams at Austrian Standards

• Main tasks and responsibilities: acquisition, sales, consulting, and accounting
• Area of work or industry: Software as a Service in whistleblowing

Selection of client projects:

• Project management at an Austrian bank for regulatory matters (2021 - 2025)
• Risk reporting for the bank
• Expansion of monthly/quarterly/annual reporting
• Automation of reporting
• Taking over the role of Internal Audit for the internationally active, publicly listed group Austriacard Holding AG, a service provider for the financial sector (2022 - 2026)
• Support for Internal Audit with IT audits at the Austrian Federal Ministry of Justice (2022 - 2023 and Q2 2025)
• Delivery of training on "Auditing AI" at the Academy for Internal Audit (2023 - 2024)
• Delivery of training on data protection (GDPR)
• Delivery of training on "Certified Whistleblowing Officer" at the Academy for Internal Audit (since 2022)
• Operation of a whistleblowing platform according to the EU Directive or the Whistleblower Protection Act in Germany and the Whistleblower Protection Act in Austria
• Support in implementing an organization for whistleblowing compliance (2022 - 2024)
• Analysis of our clients' whistleblowing tips (since 2022)

• Main tasks and responsibilities: acquisition, sales, consulting, and controlling, power of attorney
• Area of work or industry: auditing and tax advisory, IT audit & IT advisory

Selection of client projects:

• Carrying out IT risk assessments as part of annual financial statement audits. Approx. 170 individual audits per year with a team of 7 - 10 employees. Among the clients were 3 private banks
• Consulting on the implementation of IT standards in companies
• Carrying out audits according to the standards IDW PS 880 and ISAE3402
• Supporting online betting providers in implementing gaming compliance systems and applying for online gaming licenses in several countries
• Consulting and implementing measures to meet the requirements of the EU GDPR
• Training on data protection (GDPR) and information security
• Various IT audits as part of internal audit engagements
• Software evaluation of ERP systems
• Handling fraud projects and investigations, including in connection with cyber security insurance
• Designing a new IT environment for a medium-sized family business
• Selection of internal activities:
• Data protection officer of BDO Austria May 2018 - March 2020
• Monthly controlling
• Employee management, annual employee reviews, and new hires

• Main tasks and responsibilities: acquisition, marketing/sales, consulting and controlling power of attorney
• Area of work or industry: management consulting

Selected client projects:

• Preliminary study, design, professional staff assessment and introduction (including change management) of an IT demand management system (alignment of the IT strategy with the business strategy) at a public transport company
• Design and implementation of workshops and creation of an IT strategy as well as definition of processes for the continuous development of the IT strategy at a public transport company
• Training in agile project management (SCRUM)
• Creation of an IT risk catalog for the Antares RIMIS platform
• Design, training and introduction (including change management) of a quality management system for rehab clinics at an Austrian rehabilitation provider
• Support in building an efficient internal control system and risk management system at a private bank in Vienna
• Design of SAP GRC for use at a data center for public administration

Selected internal tasks:

• Annual creation of the short-term company strategy, including planning of budget, marketing activities, training and customer analysis (new and existing customers)
• Monthly controlling
• Employee management and hiring
• Tasks in risk and quality management (ISO 9001 certification)

• Main tasks and responsibilities: deputy head of the working group "Neuro Risk Management" in Germany discussions on special topics in risk management

Project highlights, Enterprise Risk Management working group:

• Creation of a guideline on the requirements for risk management in Austria: principles of proper risk management
• Discussions on risk catalogs, project risks, asset management, quality management, risks in processes, etc.

Project highlights, Information Risk Management working group:

• Review of the information security guideline
• Preparation of statements on BYOD (bring your own device)
• Discussions on W-LAN, eCommerce policy, SLA, cloud services, etc.

Neuro Risk Management working group:

• Discussions on how people react to stress in the work environment and how negative effects on the company can be identified early and countered appropriately
• Methods for resolving conflicts in day-to-day work
• Project risks that arise from the composition of the project team

• Main tasks and responsibilities: leading a team of IT auditors, manager of the IT department Vienna (authorized signatory)
• Area of work or industry: auditing

Selected client projects:

• Planning, coordination, project management, and execution of various compliance audits as part of the annual audit. This included several major banks, such as Raiffeisen Bank, Bank Austria, BAWAG, and Volksbanken
• Project lead for security audits of networks
• Conducting internal audit projects in Austria

Selected internal tasks:

• Planning the annual department resources
• within the audit department regarding IT auditors
• within the IT service department regarding the provision of applications
• Definition of internal service level agreements and provision of applications
• Planning marketing activities for the IT audit department
• Maintaining relationships with partner and network companies, some of them international
• Local adaptation and implementation of international corporate identity guidelines

• Main tasks and responsibilities: preparing and giving various talks at events, preparing and delivering training sessions

Selected projects:

Talks:

• Topics: compliance, IT audit, IT security, ethics in AI, blockchain, data protection, risk management, archiving, software license management, SAP authorization concept
• Organizers: Management Circle, imh, IIR, DIIR, Deloitte, KPMG, BDO, Women in AI

Training sessions:

• IT Security Awareness, 1 day, KPMG
• SAP system audit, 2 days, Deloitte
• SAP authorizations, 2 days, Management Circle
• IT audit, 2 days, The Institute of Internal Auditors (IIA), as well as 3 days at Deloitte and KPMG as in-house training
• Quality management, target-group oriented, 2 or 5 days, PVA
• SCRUM, 2 days as in-house training or 1 day, IIA
• GDPR, 1 day, BDO internal as well as in client projects
• Ethics in AI, 1/2 day, Women in AI
• From zero to AI, 1 day, KDZ
• AI in the everyday work of SMEs, 1 day, House of Digitalization, Tulln
• Individual end-user training on AI, 1–2 days, customized for clients

Certifications with exam:

• Certified Whistleblowing Officer, 2 days, Academy for Internal Audit
• Certified AI Compliance Officer, 3 days, Academy for Internal Audit