Risk Compliance Industrial Cybersecurity
Making GRC work in industrial environments.
Insights on ISO/IEC 27001, TISAX, governance and security practices based on practical experience in production and OT contexts.
Connecting standards, processes, and operational practice to drive real business value
I help align Governance, Risk & Compliance (GRC) with ISO/IEC 27001, TISAX, IATF 16949, and VDA 6.3 requirements, making compliance a practical part of daily operations in production, IT, and OT environments.
My focus is on bridging the perspectives of auditors, customers, and operators, ensuring that standards are not just documents, but living processes that support business value.
More about me
Key Competencies
The core driver. Moving from general strategy to specific risk-based actions.
My approach connects GRC architecture with real operations, focusing on measurable business value, process transparency, and risk mitigation.
I deliver business value through process transparency, control over critical operations, and informed risk mitigation.
Hover over the points on the GRC diagram to explore different aspects.
Selected traffic metrics based on Google Analytics data