• Fulfillment of compliance requirements for the creation of a credit card banking app in accordance with MaRisk, BAIT and PCI-DSS for a direct bank
• Fulfillment of compliance requirements for secure software development (DevOps) in accordance with MaRisk and BAIT at a software manufacturer on behalf of a state bank
• Standards/Best Practices: MaRisk - BAIT - PSD2 - OWASP

• Introduction of an ISMS according to DIN ISO 27001 or BSI IT-Grundschutz (100/200)
• Design and development of an information risk management system to comply with MaRisk, BAIT and PCI DSS.
• Assumption of the role of external information security officer
• Creation of a security concept for secure operation based on the requirements of ISO 27001 for a software solution (based on Microsoft Azure Rights Management) at a technology group in the field of special glass and glass ceramics
• Conception of the requirements and risk management as well as the steering of documented information in accordance with BSI IT-Grundschutz and the secrecy manual for a public client for the construction and commissioning of a high-security network
• Conception and migration of the security concept (approx. 7,000 measures) from BSI standard 100 to BSI standard 200 within the software solution Verinice using a self-programmed software solution for an IT service provider
• Consulting for the conception and implementation of an ISMS according to ISO 27001
• Standards/Best Practices: ISO 27001 - BSI IT-Grundschutz - MaRisk - BAIT - PCI DSS.

Support for the creation of a requirements catalog on information and IT security topics in the course of preparing an invitation to tender.

• Conception and support during the implementation of a security awareness campaign, incl. live hacking by means of USB Rubber Ducky as well as creation of posters, flyers and give-aways.
• Training to sensitize managers to IT security issues, incl. live hacking to steal WLAN passwords using a dictionary attack.

• Conception and realization of the seminar: "Information Security Officer based on ISO 27001 and BSI IT-Grundschutz with TÜV Rheinland certified qualification" for M&H IT-Security GmbH
• Open seminar "Making risk management easy" (Sec2do)

Consultation of the German Hospital Association (Deutsche Krankenhausgesellschaft e.V.) on the creation of an industry-specific security standard (B3S) in the healthcare sector to meet the requirements of the IT-SiG (KRITIS environment)

• Conducting audits and quick checks to determine the compliance of information security management systems, according to the specifications of BSI IT-Grundschutz, DIN ISO 27001 or the specifications of VDA (ISO 27001 and prototype protection)
• Preparation of an expert opinion on the compliance of the security concept for a specialized IT procedure based on IT-Grundschutz for the online registration of motor vehicles on behalf of an IT service provider
• Consulting services in preparation for an external audit of an accounting-relevant software product created by the client. The audit is based on the auditing standard PS 880 of the Institute of Public Auditors in Germany (IDW).
• Standards/Best Practices: ISO 27001 - BSI IT-Grundschutz - VDA Prototype Protection.

• Creation of an IT security concept for secure operation based on the requirements of ISO 27001 for a software solution at a technology group in the field of special glass and glass ceramics. The focus was on the technologies Microsoft Azure Rights Management and Privileged Access Management solution.
• Creation of a BSI IT-Grundschutz compliant IT security concept for a medical service for data protection compliant use of the CISCO Webex based Unified Collaboration and Communication Systems platform. The focus was on securing social and health data.
• Creation of a BSI IT-Grundschutz compliant IT security concept for the processing of pseudonymized health data using the SAP HANA platform and SAP Data Intelligence.

• Consulting on the preparation of the study "Survey of costs for the implementation of the IT Security Act in BSI-KRITISV-Relevant Hospitals" on behalf of the German Hospital Association e. V and in cooperation with Goldmedia GmbH Strategy Consulting.
• Consulting and preparation of the "Study on Critical Services: Inpatient Medical Care" on behalf of the Federal Office for Information Technology and in cooperation with Goldmedia GmbH Strategy Consulting and SONOXO GmbH.
• Consulting and preparation of the study "Impacts caused by IT security incidents in Germany - Study on the survey of expenses and damages in KRITIS industries" on behalf of the Federal Office of Information Technology and in cooperation with Goldmedia GmbH Strategy Consulting and SONOXO GmbH

• Verinice.PRO, Technische Migration von von BSI 100 auf BSI 200 (verinice.XP) [link]
• Digitalcontrolling schützt Ihre Daten! - Software Forums Leipzig, User Group "Finance and Controlling in IT"
• DSGVO: Wie sollten Sie Vorgehen, um ein Datenschutzmanagementsystem (DSMS) zu etablieren? (IT-Security - Forum of the SIBB in Berlin)
• Ziel: Sensibilisierte Mitarbeiter – Show-Stopper Datenschutz? (10th Cyber Security Day of the Alliance for Cyber Security in Hannover)
• IT-Sicherheitsgesetz (IT Security Forum of SIBB in Berlin)
• Awareness als Erfolgsfaktor in der Informationssicherheit (IT Security Forum of SIBB in Berlin)
• Prägnantes Reporting von IT-Risiken - Kernaufgabe im Rahmen des Informationssicherheits-Managements (3rd IT Security Conference of the Finanz Colloquium Heidelberg in Berlin)

• IT Security Risk Reporting - Recommendations for Addressee-Related Reporting on IT Risks, Patrica Protzmann and Martin Peters in BankPraktiker 03/2015
• Automatic Monitoring Closes Security Gaps in Self-Service Management - Detecting Irregularities in Time, Martin Peters in Sparkassenzeitung 11/2007
• Event-driven evaluation of processes in the Communication Center Prof. Dr. Pietsch, Martin Peters (Tews) in CONTROLLING, Issue 3, Verlag C.M. Beck Vahlen, Munich Frankfurt, 2001
• Standard software or individual software? Martin Peters (Tews), Stephan Sage in expertISen: ISBN 3-9806568-4-5, Berlin, 2000