Microsoft Windows Experts

• Founder of CheironX: AI-supported GRC management (ISO 27001, BSI IT-Grundschutz, TISAX, DORA)
• Strategic focus on Agentic AI and GenAI for modern IT Governance, Risk & Compliance Management
• IT interim management and strategic consulting

Project: Digital Sovereignty – Toll Collect

Workshop: Digital Sovereignty Recognize dependencies, reduce risks, remain capable of acting

Format

• One-day practical seminar

Target group

• Executive management
• IT managers
• Data protection officers
• Compliance functions

Content and objectives

• Systematic analysis of digital dependencies
• Assessment of legal and operational risks
• Development of a concrete plan to increase digital sovereignty
• Mapping of the entire IT infrastructure by participants
• Identification of critical dependencies on non-European providers
• Creation of a prioritized risk matrix based on:
• GDPR
• NIS2
• EU AI Act
• Joint development of options for action – from a hybrid model to complete migration to European solutions
• Development of an individual sovereignty roadmap with:
• Responsibilities
• Milestones
• Budget framework

Agenda

• Preliminary self-assessment (current infrastructure)
• Digital sovereignty? Nothing but an illusion
• Digital sovereignty 2026 – Germany’s dangerous dependency in focus
• Digital sovereignty & open source
• What is digital sovereignty?
• Three questions raised by digital sovereignty
• Reflection: Digital sovereignty in your own life
• Why is digital sovereignty existential now?
• Practical examples of digital sovereignty
• Schleswig-Holstein initiative
• Benefits of digital sovereignty for your company
• Assessing strategy options (cost-benefit matrix)
• Sovereign provider? 10 questions
• What does digital sovereignty specifically mean for your company?
• How do you shape digital sovereignty?
• Digital sovereignty and psychological safety
• Psychological safety: The key to high-performing teams
• Why psychological safety in your company?
• Benefits of psychological safety
• Invitation to group work: PsySafety Check (PS-C)
• The “Braintrust” experiment
• Creating a risk matrix
• Creating a roadmap & project plan
• European alternatives to US Big Tech
• 10-point plans:
• NIS2
• EU AI Act
• GDPR
• ISO 27001

• Security Clearance 2 (SÜ2) verified
• Reported to the GMN Serie1 TP subprogram management
• Ensured the handover of around 300 deployable data center containers to the Bw customer in accordance with contractually defined military requirements
• Ensured transport and acceptance by Bw
• Ensured staff training
• Prepared decision papers (e.g., project plans, governance models, communication plans, controlling models, roles and responsibilities matrices)
• Analyzed existing processes, identified areas for improvement, and designed solutions to increase their efficiency and effectiveness
• Responsible for project governance through reporting and resource planning in the subprogram using Jira, PM Pulse, KeyPIA (MicroStrategy)
• Developed the project methodology using agile methods
• Handled customer requirements (Requirements Engineering)
• Prepared for and supported contract negotiations for “System Maintenance 2027+” (7-year term, 500+ Mio budget)

• Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
• Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
• Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
• Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
• Prepare security and compliance to support Microsoft 365 Copilot.
• Implement information protection and data loss prevention by using Microsoft Purview.
• Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
• Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
• Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
• Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.

• Operation and further development of the network and security infrastructure.

• Monitoring, analysis and resolution of network and security incidents.

• Cross-departmental collaboration with other teams on operations and further development, and reporting.

• Firewall vulnerability analysis.

• Firewall access requests.

• Troubleshooting IP communication issues on network and firewall infrastructure.

• Security-critical IT infrastructure, processing of personal data, compliance with legal requirements.

• Products: Palo Alto Networks Firewalls, Cisco ACI, Checkpoint Firewalls, F5

• Technologies: SDN, SDWAN, Cisco EPIC, Cisco ACI

• Creating concepts and architecture for domain integration (SEAT into the VW structure)
• Domain trusts and administration
• Operation and administration of Windows 2022/ 2025 servers and domains
• Domain restructuring
• GPO and SG editing and migration
• DNS restructuring and migration

Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMWare vSphere, Hyper-V, Powershell, Jira, MS Office 365,), SCCM, VSAN Fileservices, Approximately 800 servers, 400 users

• Developed a pilot system to control and monitor multiple GoPro cameras
• Implemented start, stop, status, media, download and diagnostic functions via COHN endpoints
• Built camera detection, individual and group control, and stable session/KeepAlive logic
• Set up a download pipeline with a queue, retry handling and temporary files
• Ensured consistent session, folder and file naming for multicamera recordings
• Integrated provisioning, certificates and network operations

AI Readiness - Part 3: Creating an e-book on the use of AI in software testing

• Designed and created an e-book on the sensible and safe use of AI in software testing from the perspective of an experienced test expert.
• Used generative AI (ChatGPT, Perplexity Pro) as a sparring partner for structuring, wording suggestions and creating variations, with all content finally reviewed and approved using my own expertise.
• Developed practical insights into the opportunities and risks of AI in testing, with a special focus on collaboration between testers and AI instead of “tester vs. AI”.
• Title: “11 starke Gründe: Dream-Team statt Rivalen - Tester und KI sind gemeinsam unschlagbar”
• Subtitle: “Wie Mensch und Maschine im Softwaretest das perfekte Team bilden – und warum reines KI-Testing riskant ist.”
• Planned use of the e-book as a basis for workshops, customer meetings or internal training.
• Technology: Generative AI, ChatGPT, Perplexity Pro, Microsoft Word, Adobe Acrobat, many years of hands-on professional testing experience, common sense.

• Extension of a Swing-based UI for recording Security Restricted Articles during baggage screening.
• Introduction of a new workflow for recording Deboarding Events.
• Extension of the reporting system for Security Restricted Articles and Deboarding Events.
• Implementation using JBoss Wildfly, PostgreSQL, spring-boot 3.x, Java 8/21, Swing, JSF, JAX-RS/Resteasy, Docker, Maven, Kiro.

Project – Evaluation and development of databases for a new product line for a measuring equipment manufacturer

• Current-state analysis
• Requirements analysis of the data storage layer
• Writing benchmark tests
• Design of the new database schema
• Database migrations
• Development of audit logging and Part11
• Creation of backup and recovery concepts
• Design of the persistence layer API
• Writing unit tests
• Creating requirements in Azure

Tools: C#, Visual Studio 2022, Azure DevOps, SonarQube, Git, RestSharp, WebServer, PostgreSQL, MS SQL, SQLite, MinIO, Podman, Docker, DataGrip, SQL Management Studio, HeidiDB, pgAdmin

Description of duties “Atruvia / HCL International” Role: HCL Notes Banking Support, Domino Administration / Migration / Operations Operations, administration and technical support of the HCL Notes/Domino environment in the Atruvia banking environment on behalf of HCL. As part of an international support team, the focus was on second- and third-level support as well as the processing, management and monitoring of SLA tickets in categories 1, 2 and 3. Duties included the technical analysis and resolution of incidents in the Notes/Domino environment, system administration, and the development and modification of Lotus Notes /Domino applications and LotusScript agents when a programming solution was required. Another focus was ticket dispatching: analysing and assessing incoming tickets, assigning them to the responsible departments and specialist teams, and subsequently coordinating and tracking processing within the agreed SLA periods. There was also direct communication and coordination with subject-matter experts, departments and end customers of the connected banks. In particular, when language or technical communication problems arose within the international support team, German-language customer communication was handled and mediation between customers and technical specialists was provided. Objective Ensuring stable and reliable operation of the HCL Notes/Domino landscape in the Atruvia banking environment and the timely processing of business-critical support cases in line with the agreed Service Level Agreements. Incidents were to be analysed as early as possible and either resolved directly through administrative measures or suitable LotusScript/Notes solutions, or forwarded specifically to the responsible specialist teams. As of: 25.09.2026 (Version 2.10 LITE) including project times Page: 3 of 32 SPO-SOFT EDV Beratung, Dipl.-Ing. Klaus Kano, Tel.: +494532-2767682, Mail: [email], [link] At the same time, qualified preliminary analysis and targeted ticket dispatching were intended to ensure that every ticket reached the technically and professionally responsible department immediately and that unnecessary transfers, processing times and associated costs were reduced. Result Operational Notes/Domino support for the banks served was reliably ensured throughout the entire project period. SLA-relevant tickets were systematically analysed, prioritised, assigned to the responsible departments and tracked through to resolution. Some incidents were resolved directly through administration, technical error analysis and the development of suitable LotusScript agents and modifications to Notes/Domino applications. By directing tickets specifically to the relevant expert and specialist teams, incorrect assignments and unnecessary processing loops were reduced and compliance with the agreed SLA times was supported. Direct communication with the banks and mediation between German-speaking end customers and the international support team also contributed to efficient problem resolution and high customer satisfaction.

As part of preparing and providing operational support for a company succession:

• Company analysis: Analysis of the overall economic, organizational and structural situation (current status, strengths/weaknesses, potential risks)
• Process analysis: Recording and documentation of all relevant business processes (BPMN, UML) in the areas of management, finance, purchasing, sales and operations
• Process optimization: Identification of weaknesses and inefficiencies, development and operational implementation of improvement measures
• Stakeholder management: Identification and analysis of all relevant internal and external stakeholders; structured communication and coordination with former and future owners, shareholders and employees
• Change management: Supporting employees and management throughout the handover process; building acceptance and trust among all parties involved
• Governance & documentation: Preparation and handover of structured operating manuals, process documentation and an organizational manual for the new business owner
• Risk & weakness analysis: Assessment of operational and strategic risks in the handover process and development of recommendations for action
• Operational support: Interim assumption of management responsibilities; ensuring business continuity during the transition phase

• Built a data integration platform for high-, medium- and low-voltage assets to enable contextual analysis of time series with master data from SCADA control systems (IEC 60870 104), INIS and SAP.
• Responsible for the architecture and implementation of the solution, and acted as a sparring partner for the Product Owner.
• Technologies used: Kotlin, Spring Boot, Maven, TimescaleDB, PostgreSQL, liquibase, Elements IoT, Docker, Kubernetes, Grafana, Python, jupyter and various API gateways.

Management of data protection & IT security-related projects. Adjustments to knowledge management and consulting processes.

Activities:

• Data protection consulting
• Process optimization in in-house consulting
• Interface to specialist departments, IT security, development and management