André Scherwinski

Your independent advisor for information security.

As an independent consultant, I support you in building and operating your ISMS – from the initial analysis through to successful certification.

I want security //

I am

Over 15 years dedicated to your security.

Über 10 Jahre im Einsatz
für Ihre Sicherheit

Services

About me

Partner

Renowned clients – successful partnerships.

My consulting services

Meine Leistungen

Information Security Consulting

Approaching information security in a structured way – pragmatic and tailored to the organisation.

IT-Grundschutz Consulting

Information security according to BSI IT-Grundschutz – implemented in a structured way and developed to be audit-ready.

Certification Support

Structured towards certification – confidently through all phases of the audit.

AI Management Systems & Governance – AIMS according to ISO/IEC 42001

Managing artificial intelligence in a structured way – responsibly, transparently, and future-proof.

Conducting Internal Audits

Conducting internal audits in a structured way – creating transparency and driving targeted improvement.

Project Management

Planning, managing, and successfully delivering projects in a structured way.

Information Security Consulting

Approaching information security in a structured way – pragmatic and tailored to the organisation.

IT-Grundschutz Consulting

Information security according to BSI IT-Grundschutz – implemented in a structured way and developed to be audit-ready.

Certification Support

Structured towards certification – confidently through all phases of the audit.

AI Management Systems & Governance – AIMS according to ISO/IEC 42001

Managing artificial intelligence in a structured way – responsibly, transparently, and future-proof.

Conducting Internal Audits

Conducting internal audits in a structured way – creating transparency and driving targeted improvement.

Project Management

Planning, managing, and successfully delivering projects in a structured way.

"For me, consulting does not mean presenting the same pre-made templates over and over, but finding appropriate, established, and innovative solutions together for the requirements at hand."

About me

Information security must work – not just be documented.

I am André Scherwinski, a consultant for information security with more than 15 years of experience across a wide range of projects and industries. After completing my studies in business informatics, I moved directly into IT consulting. At a medium-sized consulting firm I built up extensive expertise over several years – from IT optimisation in public administration to projects in the financial services, international service provider, and automotive sectors.

learn more //

Ready for more security. Let's talk!

Get in contact //

About me

Information security must work – not just be documented.

learn more //

Ready for more security. Let's talk!

Get in contact //

Consulting & Audit – Two Perspectives

In addition to consulting, I also work as an external auditor in the field of information security.This role gives me an additional perspective: audit work regularly reveals how differently organisations implement requirements – what works well and where typical challenges arise.These insights flow directly into my consulting work – in the form of proven approaches, realistic assessments, and practical solutions.

learn more //