ISO/IEC 27001 • ISO/IEC 42001 • IT-Grundschutz • KRITIS §8a

Independent cybersecurity and AI governance audits with executive-level clarity.

NORMATIV supports organizations that need credible, structured, and practical security assurance. Focused on audit readiness, risk-driven controls, and measurable improvement.

Core Services

ISO/IEC 27001 Audits

Gap assessments, internal audit support, and management-system optimization aligned with ISO/IEC 27001:2022.

ISO/IEC 42001 AI Governance

Pragmatic support for AI management systems, accountability frameworks, and auditable governance controls.

Cybersecurity Program Delivery

Hands-on implementation support for secure SDLC, DevSecOps workflows, and audit-proof operational processes.

Profile

Led by Johannes Ellinger (MBA, MSc), NORMATIV combines over two decades of software architecture, project delivery, and international consulting experience with specialized expertise in information security auditing.

Relevant engagements include financial institutions, enterprise technology programs, and business-critical transformation projects requiring dependable outcomes, confidentiality, and strict timelines.

Selected Credentials

CQI / IRCA ISO/IEC 27001:2022 Lead Auditor BSI ISO/IEC 42001 AI Lead Auditor TÜV IT-Grundschutz Praktiker BSIG §8a KRITIS Auditor Harvard AI with Python

Additional certifications and portfolio references are available upon request.

Contact

For audit inquiries and project discussions:

info@normativ.at