André Scherwinski
About Me
About Me
Information security must work – not just be documented.
That is my standard in every engagement: pragmatic solutions, clear statements, and advice that genuinely fits the organisation.
About Me
I am André Scherwinski, a consultant for information security with more than 15 years of experience across a wide range of projects and industries.After completing my studies in business informatics, I moved directly into IT consulting. At a medium-sized consulting firm I built up extensive expertise over several years – from IT optimisation in public administration to projects in the financial services, international service provider, and automotive sectors.From an early stage my focus was on IT service management, IT risk management, and the establishment of information security management systems (ISMS). I led many of these projects independently and supported organisations over the long term.Going independent was the logical next step for me: delivering consulting the way I believe it should be done – independent, honest, and free of unnecessary complexity.
How I Work
My clients particularly value three things:
Clear and honest assessmentThe focus is on what is genuinely useful and necessary.
Pragmatism over theorySolutions must work in practice – not just on paper.
Individual consultingNo two organisations are alike. That is why I do not offer off-the-shelf solutions.
I work across industries – from start-ups and mid-sized companies to large corporations and the public sector. This variety helps me bring different perspectives and develop tailored solutions.
Consulting & Audit – Two Perspectives
In addition to consulting, I also work as an external auditor in the field of information security.This role gives me an additional perspective: audit work regularly reveals how differently organisations implement requirements – what works well and where typical challenges arise.These insights flow directly into my consulting work – in the form of proven approaches, realistic assessments, and practical solutions.
Areas of Expertise
• Information security management
• Project management• Risk management
• Process and service management in IT environments
• Management systems• Auditing
Methodological Competencies
• ISO/IEC 27001 (ISMS, Information Security Management System)
• ISO/IEC 42001 (AIMS, Artificial Intelligence Management System)
• BSI IT-Grundschutz
• IT Security Catalogue pursuant to EnWG / KRITIS and NIS2• VDA ISA / TISAX
• BPMN• Project management according to IPMA
Qualifications and Certificates
• Lead Auditor ISO/IEC 27001:2022 (ISMS)
• Lead Auditor ISO/IEC 42001:2023 (AIMS)
• Lead Auditor ISO/IEC 27701 (DSMS/PIMS)
• ISO/IEC 27001 Auditor Training according to the IT Security Catalogue of the Federal Network Agency pursuant to §11 (1a) EnWG and §11 (1b) EnWG
• Audit Procedure Competence for §8a BSIG
• IT Security Officer according to IT-Grundschutz / ISO 27001
• TISAX Auditor Training + Update VDA ISA 5.0• Project Management Professional (GPM) – IPMA Level D
Ready for more security? Let's talk.
Schedule an appointment //
About Me
I am André Scherwinski, a consultant for information security with more than 15 years of experience across a wide range of projects and industries.After completing my studies in business informatics, I moved directly into IT consulting. At a medium-sized consulting firm I built up extensive expertise over several years – from IT optimisation in public administration to projects in the financial services, international service provider, and automotive sectors.From an early stage my focus was on IT service management, IT risk management, and the establishment of information security management systems (ISMS). I led many of these projects independently and supported organisations over the long term.Going independent was the logical next step for me: delivering consulting the way I believe it should be done – independent, honest, and free of unnecessary complexity.
How I Work
My clients particularly value three things:
Clear and honest assessmentThe focus is on what is genuinely useful and necessary.
Pragmatism over theorySolutions must work in practice – not just on paper.
Individual consultingNo two organisations are alike. That is why I do not offer off-the-shelf solutions.
I work across industries – from start-ups and mid-sized companies to large corporations and the public sector. This variety helps me bring different perspectives and develop tailored solutions.
Consulting & Audit – Two Perspectives
In addition to consulting, I also work as an external auditor in the field of information security.This role gives me an additional perspective: audit work regularly reveals how differently organisations implement requirements – what works well and where typical challenges arise.These insights flow directly into my consulting work – in the form of proven approaches, realistic assessments, and practical solutions.
Areas of Expertise
• Information security management
• Project management• Risk management
• Process and service management in IT environments
• Management systems• Auditing
Methodological Competencies
• ISO/IEC 27001 (ISMS, Information Security Management System)
• ISO/IEC 42001 (AIMS, Artificial Intelligence Management System)
• BSI IT-Grundschutz
• IT Security Catalogue pursuant to EnWG / KRITIS and NIS2• VDA ISA / TISAX
• BPMN• Project management according to IPMA
Qualifications and Certificates
• Lead Auditor ISO/IEC 27001:2022 (ISMS)
• Lead Auditor ISO/IEC 42001:2023 (AIMS)
• Lead Auditor ISO/IEC 27701 (DSMS/PIMS)
• ISO/IEC 27001 Auditor Training according to the IT Security Catalogue of the Federal Network Agency pursuant to §11 (1a) EnWG and §11 (1b) EnWG
• Audit Procedure Competence for §8a BSIG
• IT Security Officer according to IT-Grundschutz / ISO 27001
• TISAX Auditor Training + Update VDA ISA 5.0• Project Management Professional (GPM) – IPMA Level D
Ready for more security? Let's talk.
Schedule an appointment //
André Scherwinski
Your independent advisor for information security.
André Scherwinski | Sollschwitz 66A | 02997 Wittichenau
André Scherwinski | Sollschwitz 66A | 02997 Wittichenau