Axel Hoehnke
Lead Auditor.
Standards Author.
I help organisations across the EU build cybersecurity programmes and contribute to standards bodies. CyberCheckHamburg makes that experience available through a public self-assessment.
Audit experience and standards work
My work covers lead audits of management systems under ISO/IEC 27001 and 42001, advice on EU requirements such as NIS2 and the Cyber Resilience Act, and standards work through ISO/IEC JTC 1/SC 27 and DIN.
The criteria in CyberCheckHamburg draw on that practice: Article 21 of NIS2, ISMS scope in Stage 1 and Stage 2 audits, and the BSI CyberRisikoCheck's TOP requirements. The questions provide an initial assessment, not proof of compliance.
I work directly with founders, CISOs, and management bodies, usually over three to twelve months. Recent projects cover NIS2 readiness for essential entities, ISO 27001 certification for SaaS providers, and ISO 42001 deployment for organisations adding AI features to regulated products. I am based in Hamburg and accept engagements across the EU and the UK.
Lead Auditor qualifications
Certifications & Verifications
How I engage
- — Engage 01
Readiness diagnostic
- Two- to four-week structured assessment against your target framework
- Gap register with prioritised, costed remediation actions
- Defensible baseline you can present to a board, regulator, or insurer
- — Engage 02
Programme delivery
- 3–9 months hands-on, embedded with your IT and compliance leads
- Documentation, evidence collection, internal audit, management review
- Stage 1 / Stage 2 audit accompaniment for ISO certification programmes
- — Engage 03
Virtual CISO retainer
- Fractional CISO capacity for SMBs and scale-ups
- Quarterly board reporting, supplier reviews, incident readiness exercises
- On-call escalation for incidents, regulatory queries, and customer due diligence
Turn your assessment into an action plan.
Our 4-week compliance sprints support implementation with a fixed scope, defined deliverables, and a fixed fee.