People Who Take Responsibility.
Information security, NIS2, ISO/IEC 27001 and Business Continuity are not theoretical disciplines.
They only work when people take responsibility—professionally, organisationally and with a long-term commitment.
Who We Are
As a Team for information security and NIS2 consulting, cyberLUTZ supports businesses, municipalities and critical organisations throughout the DACH region in the practical implementation of regulatory requirements.
Our focus is on personal support, clearly defined responsibilities, practical security measures and resilient structures you can rely on when it matters most.
We work where requirements become complex, liability matters and security needs to be more than just documentation.
Our Team
cyberLUTZ combines organisational information security with technical cybersecurity expertise and extensive project experience.
We are not individuals working in isolation, but a team that thinks together, makes decisions together and takes responsibility together.
What brings us together is not only our expertise, but also our commitment to doing things properly.
We do not spend time talking around problems. Instead, we develop solutions that stand up to everyday operational demands and deliver results our clients can depend on.
Many of us come from projects and working environments where rapid execution and clear decision-making are essential.
That is exactly where we learned what truly matters: high-quality work, honest communication and trust within the team.
Founder & Managing Director
Ing. Bernhard Lutz MSc.
Areas of Expertise:
Compliance (NIS2, DSGVO, ISO/IEC 27001)
CISO-as-a-Service & DSB-as-a-Service
Business Continuity & Crisis Management
Responsibilities:
Overall responsibility for strategy, quality standards and professional leadership.
Primary point of contact for information security, compliance and sensitive executive and management-level engagements.
Appointments, Positions & Teaching:
Chairman of Junge Wirtschaft Lienz
Lecturer at FH Gesundheit Lienz
TÜV-Certified Data Protection Officer
External Data Protection Officer for municipalities
External Data Protection Officer for healthcare providers and hotels
“Effective security requires clarity – not complexity.”
Security Assessment Specialist & Penetration Tester
Emanuel Pichler BSc.
Areas of Expertise:
Security and vulnerability assessments
Penetration testing and attack simulations
Network segmentation and system hardening
Technical gap analyses for NIS2 and ISO/IEC 27001 readiness
Responsibilities:
Identifying critical technical vulnerabilities, prioritising real-world risks, developing effective security measures and supporting technical implementation through to final verification.
Background:
HTB Certified Penetration Testing Specialist
Systems Administration
Security Engineering
Software Engineering & Cybersecurity
Business Development Manager
Paul Stader
Areas of Expertise:
Strategic business development and market positioning
Process optimisation and scalability
Sales development and lead generation
Marketing and growth strategies
Responsibilities:
Driving sustainable growth, market expansion and operational scalability, while strategically developing internal structures and business processes.
Background:
Systems Design and Integration in Engineering
Global Project coordination
International collaboration and process optimisation
Backoffice & Administration
Marie-Christin Webhofer
Areas of Expertise:
Office management and internal operations
Coordination of appointments, quotations and business processes
Administrative project supportCommunication and stakeholder coordination
Responsibilities:
Responsible for ensuring smooth administrative operations, internal coordination and organisational support for ongoing projects.
Partners & Network
Legal, Audit & Specialist Expertise
Depending on the scope of a project or the specific requirements involved, we work with trusted partners specialising in technology, legal services and auditing.
Added Value for Our Clients:
Access to specialist expertise without additional coordination effort.
Our Values
- Responsibility & Professional Integrity
We take responsibility for every engagement we support. - Implementation Instead of Theory
Concepts must work in day-to-day operations, not just during an audit. - Partnership & Transparency
We openly communicate what is necessary, even when the conversation is challenging. - Rooted Locally, Operating to International Standards
We understand the realities faced by businesses, municipalities and operators of critical infrastructure, while working in accordance with recognised international standards.
Who We Work With
We support organisations with information security, regulatory compliance and business continuity.
Elektrowerk-Genossenschaft Hopfgarten i. Def. reg. Gen. mbH
Laufende Betreuung, externer Informationssicherheits-beauftragter (ISB)
Aufbau CSMS Cybersecurity Management Systems [IEC 62443] Absicherung OT-Infrastruktur
Aufbau eines Integrierten Informationssicherheits-managemenstystem (ISMS) gem. ISO/IEC 27001
Aufbau Betriebskontinuitäts-Managementsystem (BCMS) gem. BSI 200-4
Schulungen, Trainings [DSGVO] [InfoSec]
Projektstart: Januar 2026
Netzdienste Defereggen reg. Gen. mbH
Laufende Betreuung, externer Informationssicherheits-beauftragter (ISB)
NIS-2 Betreuung und Umsetzung*
Aufbau eines Integrierten Informationssicherheits management System (ISMS) gem. ISO/IEC 27001
Betriebskontinuitäts-Managementsystem (BCMS) gem. BSI 200-4
Projektstart: Juli 2024
*NIS-2 für öffentliche elektronische Kommunikationsnetze
ThermenResort Warmbad Villach Holding GmbH
Laufende Betreuung, externer Datenschutzbeauftragter [DSGVO]
Laufende Betreuung, jährl. Datenschutzaudits [DSGVO]
NIS-2 Betreuung und Umsetzung**
Begleitung beim Aufbau eines Integrierten Informationssicherheits management System (ISMS) gem. ISO/IEC 27001
Begleitung im Aufbau Betriebskontinuitäts-Managementsystem (BCMS) gem. BSI 200-4
Projektstart: Januar 2024
**NIS-2 für Gesundheitswesen
Warmbader Krankenanstalten GmbH
Laufende Betreuung, externer Datenschutzbeauftragter [DSGVO]
Laufende Betreuung, jährl. Datenschutzaudits [DSGVO]
NIS-2 Betreuung und Umsetzung**
Begleitung beim Aufbau eines Integrierten Informationssicherheits management System (ISMS) gem. ISO/IEC 27001
Begleitung im Aufbau Betriebskontinuitäts-Managementsystem (BCMS) gem. BSI 200-4
Projektstart: Januar 2024
**NIS-2 für Gesundheitswesen
Gemeindeamt Hopfgarten i. Def.
Laufende Betreuung, externer Datenschutzbeauftragter [DSGVO]
Umsetzungsbegleitung von Absicherungsmaßnahmen für gemeindeinterne Infrastruktur
Schulungen, Trainings [DSGVO] [Informationssicherheit]
Active Directory Härtung Umsetzung “AD-Tiering”
Implementierung Rollenbasierter Berechtigungskonzepte,
Umsetzung interner Netzwerkverschlüsselung
Projektstart: Januar 2024
Gemeindeamt Innervillgraten
Laufende Betreuung, externer Datenschutzbeauftragter [DSGVO]
Umsetzungsbegleitung von Absicherungsmaßnahmen für gemeindeinterne Infrastruktur
Schulungen, Trainings [DSGVO] [Informationssicherheit]
Implementierung Rollenbasierter Berechtigungskonzepte
Projektstart: April 2024
Gemeindeamt
Virgen
Laufende Betreuung, externer Datenschutzbeauftragter [DSGVO]
Umsetzungsbegleitung von Absicherungsmaßnahmen für gemeindeinterne Infrastruktur
Schulungen, Trainings [DSGVO] [Informationssicherheit]
Implementierung Rollenbasierter Berechtigungskonzepte
Projektstart: März 2024
Abwasserverband Hohe Tauern Süd
Laufende Betreuung, externer Datenschutzbeauftragter [DSGVO]
Risiko- und Schwachstellenanalyse
Umsetzungsbegleitung von Absicherungsmaßnahmen für betriebsinterne Infrastruktur
Schulungen, Trainings [DSGVO] [Informationssicherheit]
Active Directory Härtung Umsetzung “AD-Tiering”
Implementierung Rollenbasierter Berechtigungskonzepte
Projektstart: Dezember 2023
What Our Clients Value
- Practical implementation rather than theoretical recommendations
- Extensive experience in managing complex regulatory requirements and legal obligations
- A holistic approach to complex systemsCombined expertise in Information Security, Business Continuity Management (BCM) and IT Service Continuity Management (ITSCM)
- Reliable, conscientious long-term support
Security Starts with Trust.
If you are looking for a partner who takes responsibility, communicates clearly and delivers practical, effective security solutions, we would be pleased to speak with you.
