Marc Pölckow

I support companies with information security, data protection, AI compliance, and regulatory implementation. The focus is on making requirements such as NIS-2, GDPR, ISO 27001-related information security structures, TISAX, DORA, BCM, and the EU AI Act understandable, assessing existing structures, and deriving realistic, auditable measures from them.

Typical projects include NIS-2 classifications, gap analyses, risk and measure assessments, audit preparation, data protection management, AI governance, business continuity-related analyses, policy and documentation work, and technical support for implementation projects.

I work at the interface of management, IT, data protection, information security, compliance, and business units. My added value lies in not leaving regulatory requirements abstract, but translating them into comprehensible decisions, priorities, responsibilities, and concrete implementation steps.

In doing so, I combine consulting experience, an auditor's perspective, and a good understanding of digital business models, IT services, and software or SaaS-related organizations. However, I do not act as a pure software developer or automation consultant, but as a subject matter consultant for security, data protection, and compliance issues in digital and regulated environments.

Mandates are particularly suitable where companies need clarity on their regulatory impact, their implementation status, existing gaps, or the next sensible measures. The goal is pragmatic, robust, and well-documented implementation that is understood internally and remains comprehensible to customers, auditors, or regulatory requirements.