Robert Dirks

As an experienced Security Architect, I help organizations analyze and improve their security architecture. I support them in assessing their current security posture, provide strategic recommendations, and develop services to strengthen information security. My focus is on recognized frameworks such as CCB's CyFun, ISO27001, and NIST CSF, with which I help organizations structure and optimize their security measures.

Furthermore, I ensure that companies comply with relevant laws and regulations, including GDPR, NIS2, and the Resilience Act. I translate complex compliance requirements into concrete and workable security solutions, enabling organizations to not only reduce risks but also enhance their digital resilience.

My expertise is primarily utilized within the healthcare sector and universities, where I work on securing sensitive data and critical IT infrastructures. With a pragmatic approach and in-depth knowledge of information security, I support organizations in realizing a robust and future-proof security strategy.

I have supported organizations in the transition from ISO27001:2013 to ISO27001:2022 by updating the control framework and integrating it with existing processes. This included updating Confluence pages (policies and procedures), reviewing risks, and related documentation. Additionally, I optimized automation in Jira for the execution of internal audits and the monitoring plan, making compliance controls more efficient and effective.

I conducted an internal audit to validate that the organization meets the requirements of ISO9001:2015. This audit served as preparation for the certification audit, not only fulfilling the mandatory internal audit requirements but also validating whether all quality measures and controls were correctly implemented. This provided the organization with insight into potential areas for improvement and increased the chances of certification.