Senior Cybersecurity & Security Metrics Advisor. International SOC/EDR responsibility, incident and crisis management, and Initiator & Lead Author of the Open Security Metrics Standard.
NICO WIEGANDNW CONSULTINGI have worked as an independent information security consultant since 2007. My professional background spans security logging, SIEM, incident analysis and SOC design through to international EDR/SOC responsibility and security metrics.
My technical foundations were built in IT operations, networking, databases and software projects. Today, this experience combines with leadership responsibility across banking, insurance, energy, retail, logistics, automotive and telecommunications.
You work directly with me. Depending on the assignment, my contribution may be advisory, design, operational leadership or transformation governance. The specific role and decision authority are agreed at the outset.
Certified Information Security Manager
ISACA
Certified since 2012 · currently active
This management-focused qualification complements my work on security organisations, governance and the oversight of cybersecurity operations.
Passed the CISSP examination in 2007.
Certification history in Microsoft infrastructure, Linux, networking and information security.
Selected professional training in AI, security platforms, forensics and governance.
Through the Open Security Metrics Standard (OSMS), I work on an open, vendor-neutral foundation for decision-oriented security metrics. Each definition connects purpose, formula, scope and evidence requirements with traceability to source data. The guiding principle: no metric without a decision.
OSMS is an open standardisation initiative. Its content is published under CC BY 4.0. This work complements my engagements with a systematic perspective on measurement and metrics governance.
ApproachI have been registered with DIN as a commenter since 2026. In September 2026, I reviewed and commented on the draft revision of ISO/IEC 27004.
Participation in the German draft review was through DIN in Berlin. My comments were accepted by the responsible national committee and submitted as DIN comments on ISO/IEC 27004 as part of the DIS ballot.
In 2015, I qualified as a Technical Expert ICT within the EU Civil Protection Mechanism. The focus is mission-critical information and communication technology in international disaster response.
For more than two decades, I have volunteered in civil protection and disaster relief. International deployments and qualifications complement my professional leadership experience with cooperation under time pressure and resource constraints.
Group and team leadership, including on-site operational leadership of two teams. Established emergency safe-water infrastructure and a microbiological laboratory.
Technical support to the UN mission as an ICT specialist and IT Officer: client and laptop installation model and support for mission IT, satellite and digital-radio infrastructure.
TAST Communication and IT Expert (2014), Technical Expert ICT (2015), Coordination Expert (2017) and Security Expert (2018). Focus: multinational coordination, information management, field security and mission-critical ICT.
My voluntary service in civil protection and disaster relief has been recognised through awards and personal acknowledgements.
Book project · In preparation
The book is being prepared for publication in German and English.
Article · All about Security · Published in German.
Article · IT-Director · Published in German; also featured on page 11 of the magazine edition.
Joint presentation by Sebastian Rohr and Nico Wiegand · 6th Security Forum, Brandenburg University of Applied Sciences.
Presentation with live hacking and Google hacking · December 2011 · IT-Showroom Mittelhessen.
Presentation · October 2010 · IHK Chamber of Commerce Darmstadt, Rhein-Main cluster.
Live-hacking presentation · August 2010 · Deutsche Post DHL national security conference — Security DPAG.
A short description of your situation, the role you need and the intended timeframe is enough to start. We can then discuss the expertise and scope of responsibility your initiative requires.
Remote from the EU · International engagements · German & English