What clients come to me with
You don't need to be in IT to work with me. These are the questions I hear most often, and what I do about them.
I keep reading about ransomware. Are we actually safe?
I review your environment and tell you honestly where you stand, in plain language and with a plan you can carry out.
Does NIS2 apply to us, and what do we have to do?
I find out whether and how the law applies to you, and which steps are really needed.
My people work from home and on the road. Isn't the door wide open?
It can be done safely. Every device is managed, every sign-in is checked, and your people hardly notice.
We pay a lot for Microsoft. Are we using it?
The security you need is often already in your licences. I switch on what you already pay for before I suggest anything new.
We still do so much by hand. Couldn't AI take that over?
Often it can. I work out which tasks an AI agent or automation can handle, and build it so that your people really gain time.
Something keeps failing and nobody knows why.
Then I take a look, remotely or on site. For companies and the self-employed, and for private individuals when needed.
One partner for everything IT.
From a secure Microsoft environment to an AI agent that prepares your quotes. I keep the whole picture in view, so everything fits together.
AI and automation
AI that takes work off your hands and speeds up processes.
- Custom AI agents
- Rolling out Copilot safely
- Power Platform and citizen development
- Process automation
Microsoft 365 and security
An environment that is secure and stays that way.
- Security review
- Entra ID, Intune, Defender
- NIS2
- Architecture and roll-out
Tools, apps and websites
Built to measure, even without a big budget.
- Webshops and learning platforms
- Planning and budget tools
- Apps and practice games
- Websites and digital menus
IT support
One fixed point of contact when something goes wrong.
- Computers, network and email
- Management for SMEs and the self-employed
- Private individuals too
- Remotely or on site
Work you can see.
A selection of what I delivered recently. For confidential assignments we show the approach, not the name.
Online learning platform with webshop
For a therapist: modules with video, recipes and exercises, payments, a calendar, certificates and gift vouchers in one platform.
- Design, build and hosting
- Payments, invoices and discount codes
- Secured with two-step verification
- Tested with more than 3,000 automated checks
- Digital breakfast menufor a B&B, in four languages
- Capacity planningfor a large public organisation
- Practice app with game elementsfor exam candidates
- Security and compliance filefor a software supplier
Where could AI save you time?
Most companies have tasks an AI agent can already handle today: preparing quotes, sorting email, summarising documents, retyping data. The AI opportunity check shows in five minutes where your biggest gain lies.
- Agentsthat carry out tasks on their own, following your rules
- Copilotrolled out safely, without sensitive data ending up in the open
- AutomationPower Automate, forms and links between your tools
- Custom worksmall apps that do exactly what you need
Every stone carries the others.
An arch stays up because each stone pushes against the next. Security works the same way. A strict password policy does little if laptops are unmanaged, and the best monitoring sees nothing if nobody knows where your data is.
Pick a stone and see what happens when it is missing.
Pick a stone
Click a part of the arch. You will see what goes wrong in practice when it is missing, and what I do about it.
Without identity management
Former staff who can still sign in. Shared admin accounts. One stolen password, and someone has the keys to the whole house.
I make sure every account has an owner, a start and an end, and that admin rights exist only at the moment they are needed.
Technical: Entra ID, Privileged Identity Management, lifecycle workflows, guest access
Without access rules
Anyone with the password gets in. From anywhere, on any device. Attackers today even capture MFA codes through fake sign-in pages.
I set out who may sign in where, from which device and with what level of certainty. Phishing-resistant sign-in comes first for the people who can do the most.
Technical: Conditional Access, passkeys and FIDO2, Zero Trust
Without device management
A lost laptop is a data breach. Nobody knows which phones have gone months without an update.
Every laptop and phone is managed centrally, encrypted and can be wiped remotely. New devices are ready to use without anyone setting them up by hand.
Technical: Microsoft Intune, Autopilot, BitLocker, app protection
Without an architect
Six good parts that don't know each other. Exceptions pile up until nobody remembers why something is open. That is how an arch collapses.
This is my actual job: the design that keeps every part in place, and still makes sense three years from now.
Technical: architecture documentation, licensing advice (Business Premium, E3, E5), governance
Without data governance
Contracts and payslips are open to the whole company in SharePoint. Copilot finds them with ease and summarises them for anyone who asks.
I map where your sensitive information is, who can reach it and how it is kept from quietly leaving the company. Only then do you switch on AI.
Technical: Microsoft Purview, sensitivity labels, DLP, Copilot readiness
Without monitoring
A break-in only shows once the damage is done: a payment to an unknown account number, a customer who received an odd email.
I set up monitoring so that suspicious sign-ins and malware stand out and get stopped, and so that someone responds.
Technical: Defender XDR, Microsoft Sentinel, KQL detection rules, incident response
Without proof on paper
After an incident you cannot show what you did to prevent it. Under NIS2, directors can be held personally liable for that.
I translate NIS2 into what it concretely means for your organisation, and make sure what you do is also documented.
Technical: NIS2, gap analysis, security plan, reporting to management
Rebuilding the City of Antwerp
6 December
2022The day a cyberattack brought the city to a standstill.
Thousands of employees had to get back to work safely, in a completely new Microsoft cloud environment. Under heavy time pressure, and with security built into the design from day one.
I knew the organisation from the inside. At Digipolis I grew from modern workplace expert to team lead and Microsoft 365 architect. When the attack came, I helped rebuild the digital workplace: identity, devices, security and governance. I still work there today.
- My role
- Microsoft 365 architect
- Scale
- Thousands of employees
- Components
- Entra ID, Intune, Defender, Sentinel, Purview
Before that
- Johnson & JohnsonIT for labs, production and warehouse in a GxP environment, where every change has to be validated.
- AperamSite lead at an industrial site, where production does not stop for a maintenance window.
- IT managerBudget, suppliers and teams at several companies. I speak the board's language too.
How strong is your arch?
Ten questions in plain language. After five minutes you can see which parts of your Microsoft environment are solid and which are wobbling, with the first thing I would do for each part.
Your answers stay in your browser. I see nothing unless you send it to me yourself.
You speak to me.
I started in the data centre, then worked in regulated labs, a steel company and a major city. Today I put that experience to work for organisations that want IT that simply works, and AI that pays its way.
No account manager, no junior taking over. Whoever draws the design also builds it. I start from what you already have, explain everything in plain language and document it so your team can carry on by itself.