Trainings & Workshops

I adapt the content to your team's existing knowledge and the problems they deal with, and work with practical examples and exercises.

Training formats

• Security awareness training (half-day): For all employees: recognizing phishing and social engineering, handling passwords and confidential data safely, communicating and working remotely in a secure way. With exercises and real examples.
• Technical deep dives for developers (full-day): In-depth workshops on secure coding, secret management, secure authentication, and cryptographic best practices. The examples come from real problems in software development, some of them from my research at CISPA.
• Executive briefings (2–3 hours): A compact session on IT security risks, regulatory requirements (NIS2, GDPR, ISO 27001), and strategic security planning. No technical background needed.
• Hands-on workshops (full-day): Exercises, case studies, and live demos. Participants work through concrete scenarios, such as setting up pre-commit hooks that catch leaked secrets or analyzing phishing attacks.

Topics in detail

• Secure software development (Secure Development Lifecycle): Integrating security into the development process: requirements analysis, code reviews, deployment.
• Secret management: Managing API keys, passwords, and certificates securely, and keeping secrets out of Git repositories.
• Authentication: Password policies, multi-factor authentication, passwordless methods. How security and usability fit together.
• Cryptographic fundamentals: Using encryption, hashing, and digital signatures correctly. Common mistakes and how to avoid them.
• NIS2 compliance and GDPR: What NIS2 and GDPR require of technical teams, and which technical measures meet those requirements.
• Incident response: Preparing for and handling security incidents. Playbooks, communication strategies, and lessons-learned processes.

Engagement process

1. Free preliminary discussion (30 min): Needs assessment, clarification of target audience and desired depth.
2. Concept development: Creation of a training plan with coordinated content, exercises, and materials for your situation.
3. Delivery: On-site or remote: half-day (3–4 hours) or full-day (6–7 hours). Hybrid formats also available.
4. Training materials: All participants receive comprehensive reference materials, including checklists and further resources.
5. Follow-up session (optional): After 4–6 weeks, a brief session (60 min) to address open questions and verify that the content has been adopted in daily work.

References

• 40th Cyber Security Day, Hamburg Chamber of Commerce (September 2026): Workshop "AI & Cybersecurity: Opportunities and Risks" with Dr. Alexandra von Preuschen (CISPA), held twice during the day as a parallel session. Organized by the BSI (German Federal Office for Information Security) and the Hamburg Chamber of Commerce. Event page

Availability

Trainings and workshops are available in Hannover, Braunschweig, Bremen, Hamburg, and across Germany: on-site, as remote sessions via video conference, or in hybrid format. Group size is flexible: from small teams of 5 to department trainings with 30+ participants.