Goal
A security level that matches your reality — not a vendor’s marketing brochure.
My Approach to IT Security
Many companies invest in security products without knowing if they’re solving the right problems. Firewalls, antivirus, SIEM systems – all important, but useless if the basics aren’t right.
My approach is different: First understand, then act.
What I don’t do
- No scaremongering: Yes, the threat landscape is serious. But fear is a poor advisor.
- No product sales: I’m independent and don’t sell security software.
- No checklist audits: Compliance is important, but ticking boxes isn’t security.
What I do differently
- Risk-oriented: Not everything needs to be perfect. But the critical things must be right.
- Pragmatic: Measures that are perfect in theory but not implementable in practice are worthless.
- Understandable: Security isn’t secret knowledge. I explain what I do and why.
Details about my qualifications can be found on the Profile page.