Author
4 articles
Biography in German
Experte für digitale Resilienz, Datenschutz und strategische IT-Governance
Christopher Schroer ist geschäftsführender Gesellschafter der firstbyte digital consulting gmbh. Seit über 20 Jahren begleitet er mittelständische Unternehmen bei der Entwicklung robuster digitaler Strategien an der Schnittstelle von IT-Sicherheit, Datenschutz, Resilienz und Zukunftsforschung.
Seine besondere Stärke: die Verknüpfung von technischem Know-how, regulatorischer Expertise und strategischem Gestaltungsvermögen. Er denkt IT-Governance konsequent ganzheitlich – von DSGVO bis KI-Ethik, von ISO 27001 bis NIS2 und TISAX®. Dabei stehen Umsetzbarkeit, Wirkung und unternehmerische Passung stets im Mittelpunkt.
Sein Beratungsstil: wissenschaftlich fundiert, unternehmerisch gedacht, praxisorientiert vermittelt. Viele Kunden vertrauen ihm seit mehr als einem Jahrzehnt, gerade wenn es darum geht, Digitalisierung sicher, wertebasiert und zukunftsfähig zu gestalten.
From 2026, the Cyber Resilience Act will determine whether digital products are still marketable. It is not technology, but rather a lack of evidence, processes, and responsibilities that will pose a risk—especially for small and medium-sized enterprises. Cybersecurity will become a mandatory management task.
ITChristopher Schroer10 minutes
The NIS2 Directive will affect around 29,500 companies in Germany from 2026, including many SMEs. In future, management will bear personal responsibility for information security, risk management, and business continuity. Fines can be up to €10 million or 2 percent of turnover. Core obligations include the introduction of an ISMS (e.g., ISO 27001 or VdS 10000), the systematic anchoring of risk management and business continuity, and compliance with incident reporting requirements (24 hours, 72 hours, 1 month). In addition, companies must take into account overlaps with the GDPR, the Supply Chain Act, and the Cyber Resilience Act. Conclusion: NIS2 is not purely an IT issue, but a matter for top management. Acting early strengthens security, resilience, and trust in the supply chain.
IT-Security & Cyber SecurityChristopher Schroer13 minutes
For many medium-sized suppliers, the TISAX® label is no longer a voluntary decision, but rather a ticket to the automotive industry in Germany. However, instead of viewing the TISAX® label as merely an obligation, it offers an opportunity to strategically and effectively anchor information security. This article shows what that means in practice.
Beginner / BasicChristopher Schroer6 minutes
How are data protection and BCM related? The GDPR demands more than just data security; it requires availability and crisis resilience. In practice, however, data protection and business continuity management are often separated organizationally. This article shows why effective data protection fails without coordinated BCM and how companies can successfully integrate reporting requirements, recovery times, roles, and responsibilities.
ITChristopher Schroer14 minutes
