Matthias Totzauer · Cybersecurity & Digital Solutions

Lead cybersecurity.
Deliver digital solutions.

Interim CISO, cybersecurity advisor and digital delivery partner. Several years of work with critical infrastructure clients connect both ITCST business areas.

Portrait of Matthias Totzauer
Matthias Totzauer Group CISO · Interim CISO

Executive profile

Leadership and technical depth in one person.

I combine more than 15 years of IT and security experience with leadership and practical delivery. For several years, my work with critical infrastructure clients has brought together cybersecurity, digital solutions and automation.

As an Interim CISO and advisor, I translate risks and requirements into decisions, responsibilities and actionable measures. In digital projects, my contribution spans process definition, system selection and integration, web applications and automated workflows.

My business areas

Two business areas.
One connected practice.

Both areas have grown from my work across IT, security and organisational change. Several years of working with critical infrastructure clients shape my focus on secure, traceable solutions that work in day-to-day operations.

01 Cybersecurity

Lead security. Make implementation achievable.

I help management, IT and operations establish priorities, take responsibility and turn requirements into practical measures.

  • Interim & Fractional CISO, governance and risk management
  • ISMS, NIS2/KRITIS and preparation for external assessments
  • IT/OT security, business continuity and cyber resilience
  • CRA readiness and security & ISMS automation

02 Digital Solutions & Automation

Make processes easier. Connect systems.

I translate operational needs into usable applications and workflows, with clear roles, maintainability and security built into the approach.

  • Web applications, portals and digital forms
  • Asset, inventory and contract management
  • Ticket systems, service workflows and approvals
  • System integration, dashboards and process automation

Not sure where to start? Explore all five navigators

Management perspective

Think in business terms.
Make security work.

My approach connects business judgement, digital change and cybersecurity. The starting point is not an individual tool, but the decision the organisation needs to make.

01Business Administration

Decide in business terms

Assess security measures in terms of business impact, effort and accountability. Make priorities and investment needs clear.

02Digital Innovation

Shape change

Consider changes to processes and technology alongside their security requirements. Build protection into the approach, rather than adding it later.

03Cybersecurity

Lead implementation

Connect governance, technical protection and resilience in a practical programme with clear owners and traceable progress.

Qualifications

Verified. Relevant. Personally accountable.

01CISSP

Certified Information Systems Security Professional

02CISM

Certified Information Security Manager

03CISA

Certified Information Systems Auditor

04ISO 27001 LA

Information Security Management

05ISO 22301 LA

Business Continuity Management

Qualification boundary

The Lead Auditor certifications document personal competence. ITCST does not provide independent certification or conformity audits.

Confidential first conversation

Which decision can no longer remain open?

In 25 minutes, clarify the decision need, urgency and engagement fit directly with Matthias Totzauer.