Certification
ISO/IEC 27001:2022 Lead Auditor (TÜV).
Certified qualification to conduct ISMS audits under the current ISO/IEC 27001:2022 standard.
ISO 27001 & TISAX® Certification — Background and Expertise
Certificates are only worth as much as the practice behind them. Here's the professional background of Josef Floesser, founder of JF Agency — a reference point before you decide on an ISO 27001 or TISAX® consultant.
Context
What matters when choosing an ISO 27001 / TISAX® consultant.
Certification is a trust business — verifiability matters more than marketing claims.
Verifiable certification, not self-promotion
A consultant should disclose their own qualifications as transparently as they expect from your ISMS.
Hands-on IT leadership, not just theory
There's often a gap between audit paperwork and real system administration — practical Head of IT experience closes it.
Specialization in Apple enterprise environments
Many consultants are platform-agnostic generalists — specific expertise in Apple MDM environments is rare and relevant for Mac-first companies.
Academic and international background
Experience with international teams and locations helps with globally operating clients, such as in the automotive industry.
Credentials
Certifications and professional background.
The facts, verified from the current CV — no embellishment.
Certification
TISAX® Information Security Consultant (TÜV Rheinland).
Certified qualification to advise companies preparing for TISAX® assessments.
Experience
JF Agency — TISAX® & ISO 27001 Consultant, since 2017.
Independent consulting practice in information security and Apple Enterprise Architecture.
Experience
Head of IT at UNDPLUS and Rekorder (freelance).
Hands-on IT leadership for an architecture firm (since 2024) and a film production company (since 2021) — both documented as references on this site.
Background
Academic and international background
Studied Information Technology and Media Studies at the University of Offenburg, complemented by exchange semesters at the University of Liechtenstein and Universidade Europeia in Lisbon (PROMOS scholarship). Afterwards Scientific Assistant (2019–2022) and Research Fellow at the Affective & Cognitive Institute (2022–2024).
- Information Technology & Media Studies — University of Offenburg
- Exchange semesters: Liechtenstein & Lisbon
- Research Fellow, Affective & Cognitive Institute (2022–2024)
- Languages: German (native), English (C2)
FAQ
Frequently asked questions about the certification.
Is Josef Floesser actually a certified ISO 27001 Lead Auditor?
Yes — the ISO/IEC 27001:2022 Lead Auditor certification (TÜV) is complete. He additionally holds certification as an Information Security Consultant for TISAX® with the TÜV Rheinland Group.
What sets JF Agency apart from other ISO 27001 consultants?
The combination of formal auditor certification and hands-on Head of IT experience at real companies (UNDPLUS, Rekorder) — not just advisory work but actual implementation practice, plus specialization in Apple enterprise environments.
Does JF Agency offer ISO 27001 consulting without an Apple focus?
Yes, ISO 27001 and TISAX® consulting is fundamentally platform-agnostic. The Apple enterprise focus is an additional specialization, not a requirement for other environments.
Other services