
Josef Vemark
Project Director
Strategic oversight, BSI liaison, and contractual accountability across the engagement. Four decades in mission-critical public and financial infrastructure.
Team
A single accountable structure for BSI C5:2020 certification support, IT-Grundschutz alignment, and Deutsche Verwaltungscloud onboarding — leadership, technical authority, and execution held apart so review stays independent.
Leadership

Project Director
Strategic oversight, BSI liaison, and contractual accountability across the engagement. Four decades in mission-critical public and financial infrastructure.

Deputy Director & Quality Manager / Systems Auditor
Independent review and methodology compliance. Configuration review, access control verification, and evidence integrity across all audit workstreams.
Technical & execution
Personnel accessing BSI sites are put forward for SÜ clearance before mobilisation. Role qualifications are verified per engagement.

Technical Lead
Owns audit methodology and the control validation framework, including FedRAMP High to BSI C5:2020 control mapping.

Cloud Security Architect
Infrastructure assessment and remediation planning for hyperscale and sovereign cloud deployments.

Senior Compliance Analyst
Gap analysis and documentation: policy frameworks, control narratives, and pre-audit evidence packages.

Penetration Tester
Technical security validation against C5 basic and additional criteria, including segmentation and identity boundary testing.

Data Protection Specialist
GDPR alignment, data classification, and residency assessment for German federal and Länder workloads.

Junior Consultant
Evidence gathering, control testing support, and coordination between technical and compliance workstreams.

Project Coordinator
Scheduling, procurement portal management, and reporting cadence with client and certification bodies.
Organogram
Leadership
Technical
Execution