Frequently Asked Questions

I don't publish rates because every engagement is different. Factors include scope, complexity, timeline, and deliverables. I'm transparent about pricing once we've discussed your specific needs. Expect enterprise consulting rates - this is not commodity work.

No formal minimum, but the nature of the work means most engagements are measured in weeks, not hours. A half-day call isn't the right fit; a 2-week assessment or multi-month architecture engagement is.

Typically: 50% on commencement, 50% on delivery for project work. Monthly invoicing for ongoing engagements. Swiss Francs preferred; EUR/USD possible. Payment terms: 30 days.

Yes, within limits. I typically work with 2-3 clients concurrently, depending on engagement intensity. I'm transparent about availability and will tell you upfront if timeline constraints exist. I don't overcommit.

For ongoing engagements, we establish contingency plans upfront. I maintain relationships with trusted specialists who can provide backup coverage for specific situations. This is discussed during engagement planning, not discovered during a crisis.

Primarily solo for strategy and architecture work - that's the point of direct expert access. For implementation-heavy phases or specialized needs (e.g., penetration testing, specific vendor expertise), I bring in trusted specialists as needed, always with your approval and transparency about who's involved.

No. Zero vendor partnerships. Zero referral fees. Zero kickbacks. When I recommend a product or approach, it's because I believe it serves your interests, not because I have a financial relationship with the vendor. This independence is non-negotiable.

Four ways: (1) I have no financial incentive to recommend any specific vendor. (2) I document reasoning in architecture decision records so you can see the logic. (3) My default recommendation is often "integrate what you have" not "buy something new." (4) My reputation depends on your outcomes — if complexity increases and integration fails, I don't get repeat business.

Because Zero Trust fails between components, not within them. Companies often have the tools they need but use them wrong. Too many point solutions, not enough horizontal integration. Before recommending new products, I evaluate whether better integration of existing products would achieve the same outcome. Complexity kills security.

I design and guide, not implement. My value is in architecture, strategy, and oversight - not in configuring firewalls or deploying agents. Implementation is done by your team, your integrators, or vendor professional services, with my oversight ensuring the architecture vision is preserved.

Concrete deliverables, not just advice. Every engagement produces tangible artifacts: assessment reports, architecture documents, roadmaps, decision matrices, or board presentations. You own these deliverables. See each service page for specific artifact lists.

Knowledge transfer is built into every engagement. Deliverables include documentation your team can maintain. For architecture work, I produce architecture decision records explaining the "why" behind decisions. The goal is to make your team smarter, not to create perpetual consulting dependency.

Minor clarifications are included. Significant scope changes or new requirements are scoped as follow-on work. For ongoing relationships, consider a retainer arrangement that provides access for questions and periodic reviews.

Based in Switzerland (near Bern). I work with Swiss and European clients primarily. Travel for workshops and key meetings is standard; day-to-day work is remote. For international clients, we establish a working rhythm that accommodates time zones.

Direct, honest, and efficient. I tell you what I think, including when I think you're wrong or when a timeline is unrealistic. I don't pad estimates or tell you what you want to hear. If that directness isn't a fit, I'm not the right consultant for you.

Strictly. All client information is confidential by default. I sign NDAs when required. I never use client-identifiable information in marketing without explicit permission.