SecureHaveNET

Governance Risk Compliance Industrial Cybersecurity

Making GRC work in industrial environments.
Insights on ISO/IEC 27001, TISAX ®, governance and security practices based on practical experience in production and OT contexts.

Read articles

Systems support people — people create value

Profile

Understand the problem. Assess the risk. Apply the requirements. Build what works.

Integrated GRC and Quality Approach

I start with the problem and how the process works in practice. I assess the risk, identify applicable requirements, and look for a proportionate solution that people can use in daily operations.

This is how I apply GRC and risk management in industrial and automotive environments: connecting ISO/IEC 27001, TISAX ®, NIS2 and customer requirements with production, IT and OT. My background in IATF 16949 and VDA 6.3 keeps that work grounded in processes.

More about me
10 years of experience
Andrzej Dudek, Quality and Information Security Systems Analyst

How I work

Understand the process. Connect risks and requirements. Improve through practice.

  1. Problem

    Find what needs to change.

  2. Process

    Understand how work happens.

  3. Risk

    Assess the consequences.

  4. Requirements

    Identify the obligations.

  5. Solution

    Build what works in practice.

  6. Improvement

    Simplify. Measure. Refine.

Competency Areas

I connect experience in quality and information security with an understanding of industrial processes. I turn requirements into actions and build improvements that support everyday work.

Requirements into practice

I translate quality and information security requirements into practical rules, documentation and actions suited to the organisation.

In practice

Structuring self-assessments and supporting evidence to identify gaps and prepare for external assessments.

ISO/IEC 27001 · IATF 16949 · TISAX®

Approach

I start by understanding how the process works and where the risks are. Then I look for practical improvements that meet the requirements.

Sculptural GRC core in glass and metal, connected to industrial security, automotive quality and information security

Governance, Risk & Compliance

I start with the process, assess the risks and identify applicable requirements. I use GRC to connect responsibilities and controls with practical, informed decisions.

Select an area on the GRC diagram to explore it.

Select a symbol to explore its role.

Latest Articles & Projects

Articles explain the analysis. Projects explore practical experiments and applications.

Explore all

Website Analytics

Selected traffic metrics based on Google Analytics data