Herbert Huber

As amanagement consultantand BAFA consultant, I support companies in the introduction, further development, and auditing of information security and data protection management systems. My focus is on the practical implementation of regulatory and normative requirements as well as strategic consulting for management and IT managers.

Service focus:

• Consulting on information security and data protection

• Implementation and further development of Information Security Management Systems (ISMS) according to ISO/IEC 27001

• Conducting risk analyses and GAP analyses

• Support in the implementation of the NIS-2 directive and establishment of NIS2 compliance structures

• Activity as external Information Security Officer (ISB)

• Activity as external Data Protection Officer (DSB)

• Development of security policies, emergency concepts, and governance structures

• Audit preparation and support of certification processes

• Consulting on technical and organizational measures (TOMs) according to GDPR and ISO 27001

• Security awareness and employee training

Qualifications and specializations:

• Certified Information Security Auditor persCert TÜV Süd

• Specialization in TISAX®

• Specialization in ISO/IEC 27001

• Specialization in VdS 10000

• Experience in implementing NIS-2 requirements

• Experience in medium-sized company structures and regulated industries

My consulting approach combines technical information security, organizational processes, and regulatory requirements into an economically viable overall solution. The goal is not just formal compliance, but a sustainably established security and data protection structure within the company.