ITCST Cybersecurity & Digital Solutions
Navigators

Matthias Totzauer · Cybersecurity & Digital Solutions

Security with leadership.
Digital with impact.

When security, requirements and digital projects compete for attention, you need a clear direction. I connect management decisions with the processes, people and systems that put them into practice.

Find my starting point ↓

Speak with me directly ↗Industry · SMEs · Critical infrastructure

15+years in IT & security
C-Leveldecisions & accountability
IT + OTconnecting technology & operations
DE / ENGerman & English

Your situation. Your starting point.

What needs
to move forward?

Choose the situation that sounds familiar. See how an engagement could start and the deliverables that could support it.

A possible starting point01 / 04
Change situation ↑

Give security a clear owner.

When leadership is missing or your team needs experienced support, we first clarify the mandate, decision rights and priorities.

Tangible deliverables

  • Mandate & responsibilities

    Define who decides, who delivers and where escalation is needed.

  • Prioritised security programme

    Connect business risks, resources and the next decisions.

  • Management reporting

    Make progress, obstacles and open decisions visible.

Discuss this starting point Explore the CISO engagement

We agree the specific scope and deliverables together before the engagement begins.

A possible starting point02 / 04
Change situation ↑

Turn requirements into a workable plan.

We bring obligations, existing controls and available evidence together, then agree the gaps to address first.

Tangible deliverables

  • Scope & requirements

    Identify the organisations, processes and interfaces to examine.

  • Gap and control overview

    Relate requirements to responsibilities and available evidence.

  • Implementation priorities

    Set out actions, owners and the decisions needed to proceed.

Discuss this starting point Explore readiness support

We agree the specific scope and deliverables together before the engagement begins.

A possible starting point03 / 04
Change situation ↑

Make the next decision actionable.

Long lists of findings need a direction. We connect business impact, technical dependencies and operational responsibilities.

Tangible deliverables

  • Decision brief

    Explain priority risks and practical options for management.

  • Action roadmap

    Order the next steps by impact, dependency and responsibility.

  • Evidence of progress

    Define what will demonstrate that an action has been implemented.

Discuss this starting point Explore the decision sprint

We agree the specific scope and deliverables together before the engagement begins.

A possible starting point04 / 04
Change situation ↑

Start with the workflow that matters.

When spreadsheets, email and manual steps slow the team down, we define a useful first solution and how it will fit into daily work.

Tangible deliverables

  • Process & friction map

    Understand users, handovers and repeated manual work.

  • Prioritised solution brief

    Define functions, data and integrations for the first useful scope.

  • Delivery & handover plan

    Agree acceptance criteria, responsibilities and the path into operation.

Discuss this starting point Explore digital solutions

We agree the specific scope and deliverables together before the engagement begins.

Clear scope. Tangible outcomes.

The right engagement
for your next step.

A focused start, ongoing leadership or a specific implementation project. We agree scope, responsibilities and fees before work begins.

01 / CLARITY

Executive Decision Sprint

Assess the situation, prioritise risks and prepare the next management decisions.
Explore the sprint ↗

02 / LEADERSHIP

Interim & Fractional CISO

Provide leadership, structure the security programme and make progress visible to management.
Discuss security leadership ↗

03 / DELIVERY

Digital & Security Automation

Connect workflows, applications and reporting. Build solutions around everyday operations.
Explore implementation ↗

How I work

From “we should”
to “here is the plan”.

Technical depth and business perspective belong together. You get a clear direction: what needs to happen, who owns it and how will we recognise progress?

  1. 01Understand

    A shared view of the situation

    Risks, processes and dependencies become a picture that management and the delivery team can use.

    Example deliverableRisk & process overview
  2. 02Decide

    Priorities with an owner

    Actions receive an owner, a sequence and a clear basis for the decisions that need to be made.

    Example deliverableDecision brief & roadmap
  3. 03Deliver

    Progress that can be traced

    Implementation, evidence and handover are considered together so the result can become part of everyday operations.

    Example deliverableEvidence & handover

Your engagement. My personal accountability.

You work directly with me: from our first conversation through assessment to the implementation support we agree. We clarify roles, boundaries and responsibilities at the start.

Matthias Totzauer

A view into engagement practice

Selected responsibilities in industry and regulated utilities.

01 / International industrial environmentCybersecurity & NIS2 Readiness

Risk assessment, NIS2 gap analysis and a technical and organisational roadmap to support management decisions.

Focus
Translate risks and requirements into a prioritised basis for decisions.
Work products
Risk overview · Gap analysis · Roadmap
02 / Regulated utility organisationGovernance & Evidence

Connect management, IT, OT, compliance and service providers through a traceable control and evidence structure.

Focus
Organise responsibilities and interfaces between leadership, specialist teams and operations.
Work products
Control structure · Evidence structure · Responsibility mapping
Explore engagement experience ↗Executive CV ↗

Two business areas · one contact

What do you want to achieve?

Choose the area that fits your task. You can find every service here, or use a navigator for initial guidance.

Based in Wunsiedel, Bavaria. Working across Germany and Europe, in German and English.

Navigators & checks

Choose your question.

Get initial guidance before discussing an engagement. All five tools are free to start and require no registration.

ITCST Cyber Intelligence

Know the signals.
Decide what matters.

Current warnings, exploited vulnerabilities and a global threat map. With a clear path from the news to your next security decision.

Open cyber situation ↗
Public source monitoring07 D
6new KEV entries
961security advisories

CISA KEV · CERT-Bund · Microsoft MSRC · heise Security · BornCity · The Hacker News

Data collection: 23.10.2026, 09:00 MEZ/MESZ

Executive Insights

Perspective before
you decide.

All insights

Before the first conversation

The essentials,
up front.

How does an engagement start?

A confidential first conversation clarifies the situation, urgency and responsibilities required. This informs a tailored proposal covering the approach, deliverables and fees.

Does the navigator provide a binding assessment?

No. The navigators provide initial orientation based on your answers. They do not replace a professional review of your specific situation, legal advice or an independent audit.

What should an enquiry include?

A contact person, company and a short description of the task are enough to start. Please do not send passwords, confidential system details or personal case data.

Are English-language engagements possible?

Engagements can be conducted in German or English. Language, on-site or remote working and the availability required are agreed for the specific assignment.

The next step

Let’s discuss
your situation.

A confidential conversation directly with Matthias Totzauer. We clarify what needs to happen and whether an engagement is the right fit.

Request a conversation
Get in touch directly[email protected]+49 162 592 2574

A personal response, usually within one working day.

Business insight meets security accountability. Business Administration · Digital Innovation · Cybersecurity Master’s studies in this field · in progress