Protforce GmbH

Period: 2020

Industry: Software manufacturer

Company size: >1000 employees

Project description: Recording, consolidation, evaluation and securing of relevant cloud assets. Development of a sustainable strategy with regard to cloud security management in order to be able to holistically secure and operate future cloud assets according to BSI standards.

Project size: >30 days

Role in the project: Complete planning and implementation of the project. Steering of employees and service providers of the client, to set up and implement internal processes.

Necessary skills to carry out the project work: Knowledge of cloud, web and network security. Expert knowledge of IT processes, security guidelines and the

Page 6 of 14 Please treat confidentially

Management of

Period: 2020

Industry: IT distributor

Company size: >200 employees

Project description: Planning and implementation of an individual penetration test of the client's internal network including connected cloud infrastructure (AWS, Azure). Subsequent recommendation of hardening measures for individual systems and the overall Active Directory infrastructure.

Project size: <20 days

Role in the project: Complete planning and implementation of the penetration test, including creation of the required software, as well as conception of the countermeasures to be implemented for the follow-up project.

Page 7 of 14 Please treat confidentially

Skills required to perform the project work: Knowledge of network and application security with a focus on Active Directory and its secure operation. Structured and transparent customer communication to coordinate critical security tests in productive environments.

Period: 2019

Industry: Software developer

Company size: <100 employees

Project description: As part of an IT asset analysis, an asset management system and corresponding processes were introduced. This includes the implementation of the corresponding software, the classification and prioritisation of IT assets (on-site assets and cloud assets (Azure, AWS, etc.)) and the strategic direction within the company in terms of growth within internal IT, as well as the future IT security strategy as a whole.

Project size: >20 days

Role in the project: Conceptual planning, project management, support of the client, elaboration and definition of the protection needs classes.

Necessary skills to carry out the project work: Broad and general knowledge of IT, information security and corporate strategy, soft skills for customer communication, project management skills.