Bernhard is able to conduct the various phases of information systems audits in order to assess compliance of relevant requirements and if benefit derived through Information Technology is maximized. That includes audit planning, interviewing clients, determining risks and controls, testing and evaluating technology controls, preparing identified issues and following-up with clients and compiling of audit reports following internationally accepted standards and frameworks.Furthermore, Bernhard understands to evaluate and assure security of Information Technology against internal and external threats by performing web application and web service penetration, source code analysis as well as network penetration scans. He understands to perfectly combine manual and automated approaches in order to maximize the efficiency of such security evaluations. In order to enable security already at the beginning of the software development life cycle, Bernhard is used to work close with development as well as to advise and train them on secure coding and best practices independent of the underlying technology.