The open community
AI experts
People who build AI, put it into a business, govern it and check that it works. Listed one by one, not as firms.
André Porsch
AI Governance & Cyber Resilience Advisor for leaders in regulated organisations | AI risk, accountability and decision-making
Cyber Resilience & AI Governance Advisor, Andre Porsch Consulting
Leipzig, Germany · Europe · English, German
About
I’m an independent advisor for cyber resilience and AI governance, based in Leipzig, Germany. I work with leadership teams in small and mid-sized organisations worldwide, with a focus on regulated industries.
My work starts with a few practical questions. Where is AI already being used? What is it allowed to do? Who accepts the risk, and who can step in and stop it? What has to keep running if a system or supplier fails?
I work through these questions with the people responsible for the business. Together, we clarify who can make which decisions, where oversight is needed and what deserves attention first. The governance should fit the organisation and the risks it faces. People need to be able to use it when information is incomplete and time is short.
I bring more than 20 years of experience in technology, security and leadership. I’m a Certified Information Security Manager (CISM) and write for ISACA about leadership, cybersecurity culture and crisis readiness. I received the Capstone Award in both the Cyber Leadership Institute’s Cyber Leadership Program and its Cyber Strategy & Transformation Program.
I run Andre Porsch Consulting. You work directly with me, from the first conversation through to implementation.
Scope and depth are matched to the organisation's size and risk profile. Eligible SMEs in Germany may apply for BAFA funding towards qualifying consulting assignments, subject to programme requirements.
What I do
- AI governance assessment: find out where AI is being used, who is responsible and where governance needs attention. Agree which gaps to address first.
- AI governance operating models and policies: set clear rules for approving AI use, accepting risk and overseeing systems as they change. Define who can intervene and when an issue needs to reach leadership.
- EU AI Act governance readiness: review existing AI governance against relevant EU AI Act requirements. Identify gaps in responsibilities, human oversight and documentation, and prioritise practical steps towards readiness.
- AI risk and supplier reviews: examine how an AI use case or supplier could affect business operations, data and security. Help leaders decide what conditions and safeguards are needed before going ahead.
- Cyber resilience and crisis readiness: identify what must keep running and the dependencies that could disrupt it. Use executive tabletop exercises to practise decisions when information is incomplete and time is short.
- NIS2 governance readiness: review how leadership fulfils its responsibilities for implementing cybersecurity risk-management measures, overseeing their implementation and undertaking regular training. Clarify responsibilities, prioritise actions and agree how progress will be monitored and evidenced.
- Executive advisory and workshops: work through the AI and security decisions facing your leadership team. Clarify the risks and which responsibilities need to stay with people.
Practice areas
Industries
Open to
Consulting, Advisory & board work, Training, Media commentary, Research collaboration, Speaking, Employment
Contacts
Identity and links confirmed by AI Business. This is not a rating, an endorsement or a recommendation.