Business Impact Analysis (BIA) and technical risk analysis for 450+ IT & Banking applications of HSBC Deutschland. Threat scenario analysis, solutions and pre-emptive controls definition.

Tools: MS Office, JIRA, Internal Project Management and Risk Evaluation tools

Vulnerability, risk and compliance management for the complete Commerzbank global networks. Installation and configuration of tools, afterwards daily operations and reporting.

Tools: McAfee Vulnerability Manager, Symantec Compliance & Control, HPSC, HPSM

Security management and incident management related support during the takeover of a large outsourcing contract in server/desktop infrastructure management. 

Tools: McAfee product suite

Reviewing and analysing current McAfee security configuration and daily operations. 

Tools: McAfee product suite, MS Office

Reviewing and analysing current McAfee Safeboot 5.x configuration and daily operations.  Introduction of the ePO managed EEPC 7.0 upgrade to Safeboot, design, rollout and training EECP/EEFF (computer and files encryption) and DLP (data loss prevention)

Tools: McAfee product suite, MS Office

Reviewing and analysing current IT Vulnerability / Risk scan on all global levels and platforms.  Number crunching, threat level analysis and recommendations for patch management and threat / risk process management.

Tools: McAfee product suite, MS Office

Reviewing security design in the service management for a new global network for Allianz AG network services. Completing missing best practises and recommending upgrade to best practises on many parts. . 

Tools: ITIL, ISO 27035, Remedy ARS 7, MS Office

Number crunching and IBM licensing expertise in balancing out global license penalties for the Deutsche Post DHL AG. Darmstadt and Bonn.

Tools: MS Office

• Product definition for a “security out of the cloud”, SecaaS product for the Telekom AG, Darmstadt. Use cases, vendor requirements definition, workshops interviewing 12 global security vendors, defining management decision foundation.
• Restructuring the IT Security Requirements on an abstract level for the DeMail product with the Deutsche Post, Bonn.
• Defining criteria and requirements for choosing a Data Loss Prevention solution for the Bundesdruckerei GmbH, Berlin. Interviewing 4 vendors and defining management decision foundation. Testing the vendor solutions and optimizing the actual operational environment, incl. companywide McAfee, Kaspersky, Firewalls design.
• Developing a consulting product/service regarding automotive and IT security. How automotive has neglected IT security, how IT security could be implemented better in the industry.
• COBIT IT Risk & Compliance analysis, categorisation and documentation for Deutsche Bahn Group IT applications. Preparation for an IT Security Audit. Frankfurt, Mainz & Doncaster.

Tools: MS Office, McAfee 8.5, 8.8, ePO & DLP, COBIT

Consulting the Vodafone Money Transfer product regarding ITIL based Change, Problem and Incident Management. Setting up procedures, optimising the current working environment and helping with operative tasks. C/P/I responsible for one customer country with millions of end customers – additionally coaching the service desk and the technical contacts.

Tools: ITIL, Remedy ARS 7, MS Office, Vodafone internal tools

Business analysis for renewing the De-Militarised Zone

Firewalls, application firewall, proxy, DMZ SAN, management console, service quality monitoring internally and externally, secure email, VPN, everything was acquired new and needed the whole specification, acquisition, implementation, testing and go-live cycle.

Requirements gathering and management in DOORS.

Test planning and test results management for the new DMZ.

Creating, gathering and managing the needed documentation for ITIL and ISO 20000 operational acceptance of the new DMZ.

Tools: DOORS, MS Office, ITIL, ISO 20000

Workshops to implement McAfee ePolicy Orchestrator 4.0.

Basic courses for administrators and advanced integration consulting to upgrade from ePO 3.6.

Tools: MS Office, McAfee ePO 4.0, MS SQL Server

Total operative ITIL coverage of the change planning, problem/incident management and information management of several Allianz eBusiness portals:

• Allianz.de (main German portal with 150+ Business Applications)
• Allianz.com (main global portal)
• EVB-Portal (online electronic car insurance confirmation)
• Automotive portal
• Fondsportal
• NPS Portal (Net Promoter Score)
• NV Portal (inside sales)

Additionally the same CPI responsibility of the portal framework for all other Allianz eBusiness portals. Including sales, marketing, CRM, 3rd tier, group management, fraud detection etc. applications. Altogether responsibility of more than 200 financial applications and the infrastructure architecture.

Coordination, troubleshooting and communication between external service management, developers, marketing, production, top management and integration testing. In general making sure that quality goals for global presence are kept, SLAs are followed, timelines and changes are well documented and in correct form. In special cases running the problem management when networks, web servers, application servers, applications or other infrastructure had black/brownouts.

Tools: ITIL, ARS Remedy, SAP Karat, MS Office

Auditing and tuning the security perimeter of the VW IT environment (150+ productive windows servers, 1500 windows clients), involving 20+ contact persons in charge of the servers.

Training, project management, technical rollout planning and execution together with a team of 3 from T-Systems UK

Environment: Windows, McAfee, Peregrine Service Desk, ITIL

Auditing and tuning the security perimeter of the VW windows server environment (2500+ production servers), involving 200+ contact persons in charge of the servers.

Communications, project management, technical rollout planning and execution together with a team of 3.

Environment: Windows, McAfee, Peregrine Service Desk, ITIL