KRITIS Experts in Munich
matched fast from over 15,000 CVsHire experts who design, assess and secure critical infrastructure across energy, healthcare, finance, transport and public services. Work with specialists in BSI requirements, risk management, incident response and resilient IT operations through fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Munich, who have recently used KRITIS
Wolfgang T.
Last position:
Overall Project Manager at itzbund
Project overview: The use of “Generative Pretrained Transformer” (GPT) technologies will greatly change the world of work in the coming years. ITZBund is developing a basic service for this purpose, which can be used by its 200 customers. This basic service is offered both on-premises and in the cloud. Launched in 12/23, production systems (based on the MVP) had already been successfully rolled out and operated for several authorities and federal ministries by 05/24.
Project metrics:
- 2024 budget approx. 20 Mio €
- approx. 70 people directly involved in the project
- regular (indirect) contact with approx. 80 people in the wider project environment
My main responsibilities:
- Overall responsibility as external project manager
- Project definition phase/ Project setup and establishment of the project organization
- Strategic and operational project planning, as well as project design and ongoing adjustments
- Ongoing coordination with the project owner and stakeholders at ITZBund
- Ongoing coordination with sub-project managers, agile roles, and other project team members
- Responsibility for project controlling, quality management, risk management, and change management
- Responsibility for providing the basic service in on-premises and cloud environments and its ongoing development
- Planning and leading several hypercare phases
- Collaboration and ongoing coordination with a federal ministry partner project and delivery of an MVP
- Coordination with the agile teams
- Coordination with operations, release, and deployment
- Responsibility for delivering initial customer projects
- Responsibility for developing AI governance
- Ensuring accessibility (BITV)
- Responsibility for setting up a sub-project for marketing activities
- Support in setting up an efficient proposal process
- Stakeholder management
Approach:
- V-Modell XT ITZBund
- Scrum
Tools used:
- Microsoft Office, Skype, MS Project, Confluence, Jira, Sharepoint, Miro
Andreas Z.
Last position:
Transformation Architect / Business Analyst at IT Consulting
- Development of a comprehensive transformation model for IT departments and ITSM organizations, from operational stabilization through structuring and optimization to strategic advancement
- Design of a transformation matrix that connects development phases with the implementation activities Position, Focus, Model, Enable, Anchor and Develop
- Development of assessment, maturity and decision-making logic to determine the operational starting point, the appropriate entry point and the prioritized areas of action
- Structuring of an end-to-end approach from current-state assessment and target vision through operating model, roadmap and service modules to implementation and integration into steady-state operations
- Derivation of combinable consulting and implementation modules, including methods, deliverables, role models, governance structures and transformation paths
- Collection, structuring and prioritization of business requirements from the perspectives of IT management, service management and operational roles
- Translation of requirements into target visions, process and role models, decision criteria and traceable deliverables
Environment / Tools: ITIL 4, IT4IT, Operating Model Canvas, SIAM, maturity models Kanban
Francisco B.
Last position:
Value Creation Manager at Energy Supplier (NDA)
- Implemented optimized management control and PowerBI solutions for the Power and Gas departments
- Perform a value chain analysis and create a business case with three scenarios and a value creation roadmap
Vicenco K.
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Rajan K.
Last position:
Technical Lead/BTV at BMW, Daimler (Mercedes), VW Group, Hella, Ficosa, Cariad (Audi/Porsche/Skoda)
- Directed full lifecycle of embedded software projects including LiDAR, BMS, OCU, and Cybersecurity systems.
- Coordinated internal and external stakeholders including suppliers like Bosch, Bertrandt, Magna, Continental and IAV.
- Managed cross-country teams of 12–15 engineers, conducting project onboarding and role-based training.
- Implemented change control and risk registers for safety-critical automotive platforms.
- Oversaw project schedules using MS Project, JIRA, and Azure DevOps to ensure milestone alignment and transparency.
- Extensive hands-on expertise in test planning and execution for ECUs in compliance with Automotive SPICE (SWE.4–SWE.6) and ISO 26262.
- Led digital transformation project with a cross-functional team of 15+, ensuring successful integration of systems and workflows.
- Maintained project overviews and tracking in tools like Milestones (Daimler) and MS Project, and managed status reporting to senior stakeholders.
- Coordinated with third-party transformation partners and ensured timely delivery of decision templates and risk assessments.
- Applied PRINCE2 methodology for structured delivery; facilitated agile ceremonies and maintained Confluence-based documentation.
- Strong leadership in cross-functional teams and working in agile environments (SAFe, Scrum).
- Successfully led and supported IT and transformation projects, including those in regulated sectors (e.g., KRITIS or energy sector).
- Represented or supported overall project leadership in large-scale transformation programs.
- Maintained and updated complex project plans (Gantt charts, milestone tracking, and resource allocation).
- Coordinated workstreams and interdisciplinary teams; ensured timely delivery of all work packages.
- Acted as central communication point between project team, senior management, external vendors, and transformation partners.
- Prepared and delivered concise status reports, steering committee presentations, and decision memos.
- Identified project risks, maintained risk registers, and led mitigation planning.
- Assessed resource needs and supported reallocation based on project priorities and constraints.
- Proficient in JIRA, Milestones, Confluence, MS Project, MS PowerPoint, and Excel.
- Used both Agile (Scrum) and Waterfall (PRINCE2, PMI) methodologies.
- Created and tracked action lists, meeting protocols, and backlog items.
- Conducted critical analysis of project progress, resource bottlenecks, and deliverable timelines.
- Ensured alignment of transformation goals with enterprise IT architecture and business objectives.
Volker R.
Last position:
Architect and Senior System Administrator at International trading company
- Analysis and optimization of the VMware environment for operation in a KRITIS environment
- Planning and implementation of updates to the VMware and hardware environment in a KRITIS environment
- Set up Skyline Health Diagnostics
- Review of the existing documentation
- Training and onboarding of new internal employees
- Support with migration and upgrade projects
- Preparations for moving scripts in the virtualization environment to GitLab
- Ticket processing with Service.Now
Florian K.
Last position:
LAN Planner at Global Network AG
- As-is assessment of the current network infrastructure and its documentation, including on-site inspections
- Independent planning of new distribution and main distribution rooms in the individual district offices (components used, rack layout, connectivity), considering the BSI IT-Grundschutz and InfoSic requirements
- Planning of new copper and fiber optic cabling, including patch panels
- Coordination with building services engineering (TGA) to ensure compliance with relevant on-site requirements
- Development of detailed execution plans and high-level concepts for the rollout of the new infrastructure
- Additional support after the components go live (hypercare phase)
- Regular communication with project management and client stakeholders
Patrick U.
Last position:
Interim Management | Consulting & Implementation | Data Deletion in SAP at BSR (Berliner Stadtreinigung)
- Topics: Business Analysis, Data Privacy, Data Management, Stakeholder Management, Conceptualization
- This project focuses on developing and implementing a strategic approach for data deletion in SAP systems. The goal is to identify the relevant data and structures during system migration to ensure both data privacy and IT system efficiency. At the same time, downtime should be minimized and regulatory requirements met.
- Development of a comprehensive approach for data deletion in SAP systems, considering data privacy and business requirements.
- Ensuring efficient and structured data transfer to the new system.
- Optimizing system efficiency and reducing downtimes during migration.
- Creating functional and technical concepts to ensure compliant and sustainable data management.
- Topic preparation: Detailed study of the "data deletion" area to lay the foundation for a structured data migration.
- Definition of project structure: Setting roles, interfaces and the project's organizational structure.
- Regulatory requirements: Analysis of data privacy regulations and business requirements to define deletion criteria.
- Approach: Developing possible scenarios and methods for data cleansing and deletion.
- Deletion concepts: Creating functional and technical deletion concepts that structure the implementation and provide clear guidelines.
- Setting deletion criteria: Defining which data and structures to delete or transfer.
- Responsibilities: Clarifying responsibilities within the project team and among stakeholders.
- Analysis of ongoing activities: Identifying and collecting existing activities in the "data deletion" area.
- Effort, cost and timeline planning: Creating estimates for resources, effort and budget.
- Implementation initiatives: Developing and executing concrete measures to apply the defined deletion strategies.
- IT system efficiency: Analyzing the existing IT infrastructure to identify optimization potential for data deletion and transfer.
- Technology trends: Evaluating new technologies and tools that can support the data cleansing process.
- Cost-benefit analysis: Assessing the financial impact of data cleansing and the introduction of new solution approaches.
- Risk management: Identifying potential risks during implementation and developing appropriate mitigation measures.
- This project lays the foundation for a sustainable and compliant data transfer to a new SAP system. With a clear approach to data deletion, it meets data privacy requirements, reduces downtimes and increases the efficiency of the new system. The results and recommendations will help companies develop a future-proof data strategy that meets legal and business needs.
Alexander N.
Last position:
Security Expert at DAK-Gesundheit
- Pentesting of mobile applications
- Code review
- Gematik audit
- Development of secure software development methods
- Creation of security and test concepts
- Penetration testing of software and architecture
- Vulnerability analysis
- Automation and information security
- Use of Confluence and Jira
- Working with databases, J2EE, JavaServer Faces, Liquibase, Apache, Maven, Mercurial, Oracle Financials
- Documentation and creation of security policies
- Management of software systems, SharePoint, PrimeFaces, Git
- Compliance with security regulations and .NET, AWS, API
- Tools: MobSF, Frida, Android Studio, Drozer, Objection, Azure
Volker J.
Last position:
Interim CISO (Germany, Austria, US, APAC), Auditor at Vetter Pharma-Fertigung GmbH & Co. KG
- Planned and initiated BIA/BCM assessment to identify risk mitigation measures and process optimization, and provide risk transparency to the general management
- Evaluated KRITIS/NIS-2 status and implemented requirements
- Created comprehensive digital roadmap and ISO 27001/NIS-2/Data Privacy KRITIS roadmap
- Enhanced crisis management process and documentation
- Integrated information security clauses into customer and supplier contracts to ensure compliance with internal and regulatory requirements
- Ensured organizational readiness for audits by the Landesbehörde für Aufsicht (LBA) and supported audit processes
- Improved asset management processes and classification of sensitive data to strengthen overall security
- Planned and ordered regular penetration tests (internal, external) to identify vulnerabilities and improve security measures
- Performed compliance checks against EU CER requirements and reporting
- Created management status and risk reports to ensure transparent communication of risks and security posture
- Managed registration with the German Federal Office for Information Security (BSI) and provided ongoing status updates
- Conducted risk assessment of supply chain, enhanced evaluation and reporting processes
- Improved IT/OT network segmentation to enhance security and reduce potential audit risks
- Strengthened cyber resilience by proactive measures and enhanced security frameworks and KPI reporting
- Onboarded SIEM/SOC/EDR to improve cybersecurity monitoring and response
- Planned and conducted awareness trainings for employees, administrators, and management
- Enhanced incident reporting processes to ensure timely and accurate reporting of cybersecurity events
- Created AI policy in cooperation with the Legal department to secure use and governance of Artificial Intelligence within the organization
- Scoped and implemented ISO 27001:2022 requirements as part of the Information Security Management System
- Served as interim InfoSec team lead
- Introduced information security to global KAM and Sales organization
- Improved admission and access management including privileged access
- Conducted internal audits in collaboration with internal audit department
Discover over 15,000 top freelancers
Statistics of experts using KRITIS
Aggregated from the professional profiles of matched freelancers.
Experience
21 years (Germany: 24 years)
Position duration
2 years (Germany: 2.1 years)
Positions per freelancer
15 (Germany: 18)
Top business areas
Information Technology, Project Management, Quality Assurance
Top industries
Information Technology, Automotive, Professional Services
Certification focus areas
Information Technology, Project Management, Human Resources
Bachelor's degree or higher
75% (Germany: 88%)
Master's degree or higher
50% (Germany: 49%)
Certifications per freelancer
4 (Germany: 8)
Most common languages
German, English, French
Speak two or more languages
90% (Germany: 94%)
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Munich are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Munich using KRITIS
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
KRITIS experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (90%)
- Automotive (70%)
- Professional Services (70%)
- Government and Administration (60%)
- Banking and Finance (50%)
- Manufacturing (50%)
- Aerospace and Defense (40%)
- Energy (40%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
KRITIS explained
KRITIS refers to critical infrastructures whose disruption can seriously affect public life, safety or economic activity. The term covers essential services such as energy supply, water, healthcare, transport, finance, telecommunications and digital infrastructure. Projects often combine operational technology, information technology, governance and resilience planning.
Typical systems
KRITIS work spans the systems that keep essential services available, safe and recoverable.
- Protect control systems, production networks and operational technology
- Design resilient cloud, data centre and communications environments
- Establish monitoring, detection and incident response processes
- Prepare continuity, recovery and crisis management plans
- Assess suppliers, dependencies and single points of failure
Standards and tooling
Strong specialists connect technical controls with regulatory and organisational requirements. Their work may involve BSI guidance, ISO 27001, IT service management, security operations, network segmentation, identity management, vulnerability assessment and disaster recovery. They also understand how security decisions affect availability and safety in live operational environments.
When expertise matters
Companies bring in freelance KRITIS specialists during audits, transformation programmes, new infrastructure rollouts and security incidents. In Munich, organisations across manufacturing, healthcare, finance, mobility and public services may need local coordination while keeping remote delivery practical. Clear German documentation can matter when teams work with authorities, operators or regional partners.
- A KRITIS assessment lacks a clear scope or ownership
- Security controls are not mapped to essential services
- Legacy operational technology must connect to modern networks
- Incident response and recovery plans have not been tested
What strong professionals deliver
The best professionals begin with service criticality, business impact and realistic threat scenarios. They map dependencies, separate trusted zones, define measurable controls and document decisions for auditors and operational teams. They can explain risk to leadership without losing the technical detail needed by security, infrastructure and plant teams.
Selecting the right specialist
Look for evidence of completed KRITIS assessments, security programmes or resilience improvements in environments comparable to yours. Ask how the specialist handled legacy systems, third-party dependencies, restricted maintenance windows and conflicting availability requirements. A useful engagement ends with practical architecture, tested procedures, clear ownership and documentation that teams can maintain after the assignment.
Frequently asked questions
Need clarity? These are the questions we hear most often about KRITIS.
KRITIS describes the protection and resilience of services that society and the economy depend on. Specialists apply it to areas such as energy, healthcare, transport, finance, water, telecommunications and digital infrastructure.
Critical infrastructure security gives special weight to service continuity, safety and recovery. General cybersecurity may protect information assets broadly, while KRITIS work also examines operational technology, physical dependencies, emergency processes and the consequences of prolonged disruption.
A strong KRITIS specialist often combines information security with risk management, business continuity, incident response, network architecture and operational technology. Knowledge of BSI guidance, ISO 27001, industrial control systems and supplier risk is also valuable.
KRITIS assignments need experience suited to their operational risk and scope, not simply a general security background. A specialist assessing a hospital, utility or transport operation should show comparable work with live services, audit evidence, recovery planning and affected stakeholders.
KRITIS projects can often be planned, documented and assessed remotely, especially when secure access is available. On-site work may still be necessary for plant networks, physical controls, workshops or restricted environments; Munich-based teams can combine local sessions with remote collaboration.
Before engaging a KRITIS freelancer, define the essential services, systems in scope, current security documentation and expected deliverables. Access rules, confidentiality requirements, language expectations and coordination with operations or compliance teams should be clear from the start.
Ask a KRITIS professional to explain a comparable engagement, including how they identified dependencies, prioritised risks and validated recovery measures. Good answers connect technical findings to service impact and produce usable controls, ownership, evidence and tested procedures.
KRITIS freelancers may lead gap assessments, network segmentation, security monitoring, incident response preparation, continuity planning, supplier reviews or audit remediation. They may also support cloud migration, operational technology integration and documentation for internal or external reviews.
The average hourly rate of freelancers in Munich, Germany who have used KRITIS in their recent projects is 118 €, which corresponds to a daily rate of about 944 € based on an 8-hour working day.
Of the freelancers in Munich, Germany who have used KRITIS in their recent projects, 75% hold at least a Bachelor's degree and 50% hold at least a Master's degree.
On average, freelancers in Munich, Germany who have used KRITIS in their recent projects have 21 years of professional experience, with a single engagement typically lasting around 2 years.
The most common languages among freelancers in Munich, Germany who have used KRITIS in their recent projects are German (100%), English (90%), and French (30%).
The most common industries among freelancers in Munich, Germany who have used KRITIS in their recent projects are Information Technology (90%), Automotive (70%), and Professional Services (70%).
The most common business areas among freelancers in Munich, Germany who have used KRITIS in their recent projects are Information Technology (100%), Project Management (100%), and Quality Assurance (60%).
Main locations of FRATCH Experts, who have recently used KRITIS
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin 
Hamburg 
Cologne 
Frankfurt 
Dusseldorf 
Essen Countries:
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
