Observe
Recognise business impact.
Group CISO · Interim CISO · Executive Advisor
Interim CISO and executive cybersecurity for critical situations.
Cybersecurity that is decided in the boardroom and effective in operations—for industrial, critical-infrastructure and regulated organisations, with dependable leadership and demonstrable progress.
Run the cybersecurity check ↗
3 questions · about 3 minutes · immediate result
Discuss an engagement →
CISSPCISMISO 27001 Lead AuditorISO 22301 Lead Auditor
Decide
Clarify options and residual risk.
Mobilise
Activate owners and resources.
Embed
Steer demonstrable progress.
15+Years in IT and security
C-LevelReporting and decisions
IT + OTGovernance through delivery
DE / ENInternationally deployable
01
When pressure becomes real
The leadership constraint
More tools do not solve a leadership problem.
The constraint is often not missing technology, but unclear accountability, competing priorities and decisions without a shared risk picture.
Leadership Gap
A CISO vacancy, unclear roles or a programme without dependable leadership.
Regulatory Pressure
Prepare for NIS2, critical infrastructure, customers or external assessments.
Technical Exposure
Prioritise findings, transformation and dependencies for decision.
Operational Resilience
Connect critical services, recovery and leadership capability.
Four engagement fields
From decision need to an effective engagement.
01↗
Security Leadership
Interim CISO
- Mandate, accountability model and decision cadence
- Executive situation report with prioritised risks and dependencies
- 90-day agenda with owners and decision requirements
02↗
Regulatory Readiness
NIS2 & Critical Infrastructure
- Executive readiness picture and prioritised gaps
- Accountability and decision model
- Requirement-to-control-to-evidence structure
03↗
Secure Transformation
IT/OT Security
- Executive-ready IT/OT risk and dependency picture
- Prioritised security target state with transition paths
- Decision papers for identity, segmentation and access
04↗
Operational Resilience
Cyber Resilience & BCM
- Prioritised critical services and recovery objectives
- Executive incident and escalation model
- Recovery dependencies, gaps and exercise agenda
What management receives
Decision capability, not activity reporting.
Situation report
A shared view of business-relevant risk, obligations and dependencies.
Decision papers
Clear options with consequences, residual risk, resources and decision authority.
Prioritised agenda
A realistic 90-day sequence and the strategic steps that follow.
Leadership model
Owners, cadence, escalation and evidence for traceable progress.
Personal accountability
Peer-level leadership.
Depth when it matters.
Matthias Totzauer supports executives, IT and security leaders when accountability, risk and delivery must be clarified at the same time.
Lead Auditor certifications are personal qualifications. ITCST does not provide independent certification audits.
Executive Insights
Perspective for better decisions.
Focused analysis of security leadership, regulation, IT/OT and resilience—from the decision-maker’s perspective.
Interim CISO, fractional CISO or permanent hire: which model fits?
Effective CISO support depends on the mandate. Urgency, leadership need, decision rights and the intended outcome determine the right model.
Read article →NIS2 across corporate groups: separating scope, accountability and evidence
A group-wide security model does not remove entity-level obligations. NIS2 readiness needs clear accountability, dependencies and evidence.
Read article →Securing OT supplier remote access: governance before technology
Remote maintenance is necessary in many industrial environments. Without controlled identities, approval, segmentation and monitoring, it becomes a critical attack path.
Read article →Next step
Which decision can no longer remain open?
Define the security need without obligation, or discuss the situation directly with Matthias Totzauer.