Kevin, what are some of the tasks you handle in your day-to-day work?

Kevin: My focus is on service delivery management and the further development of our service processes. At the same time, however, I remain actively involved in the support business. This allows me to stay in touch with the day-to-day challenges our customers face. This combination helps me not only improve processes in theory, but also refine them based on concrete experiences from day-to-day operations.

You’ve introduced a new support standard. What prompted this change?

Kevin: Today, our customers expect clear processes, fast response times, and transparency. That’s why we analyzed and refined our existing workflows. The goal was to establish clear lines of responsibility, standardize communication channels, and make collaboration between customers, support, and operations even more efficient.

What benefits does this bring to customers?

Kevin: Above all, customers benefit from greater transparency and accountability. They always know who their point of contact is, what the current status of their request is, and what the next steps are. At the same time, we can prioritize requests more quickly and handle them in a more targeted manner.

Does working in support help you in your role as Service Delivery Manager?

Kevin: Definitely. If you want to improve service quality, you should experience the daily challenges firsthand. By working on tickets and customer inquiries, I get a direct sense of where processes are working well and where there’s still room for improvement. That fosters understanding on both sides—for our customers and for our team.

What challenges do you encounter most frequently?

Kevin:Kevin: Every customer works differently and has different requirements. The challenge is to establish consistent standards while remaining flexible enough to accommodate individual needs.

What motivates you in your work?

Kevin: I’m especially motivated when customers feel that we understand their needs and are actively working on improvements. It’s great to see how a support request can lead to long-term optimizations that make our customers’ day-to-day work easier.

Thank you very much for the interview!

Lutz, what do we at ASTRUM IT mean by “custom software development,” and what is the greatest value it offers our clients?

At ASTRUM IT, we define custom software development as solutions that are consistently tailored to our customers’ specific technical, organizational, and regulatory requirements. Our software is not a off-the-shelf product; rather, it is developed specifically for each use case, often as a proprietary solution in complex fields such as medical technology, industry, or public administration.

In my view, the greatest value we provide to our customers lies in efficiency, knowledge transfer, and flexibility. Close collaboration between our teams and the experts on the customer side also facilitates a sustainable transfer of knowledge. At the same time, custom software allows us to respond quickly and effectively to changing requirements or conditions.

What phases does a typical project go through—from the initial idea to the finished application?

It always begins with a clarification phase, during which goals, requirements, and framework conditions are defined collaboratively. This is followed by a conceptual phase, in which the architecture and technological foundations are established.

Implementation then proceeds iteratively and agilely, usually in short development cycles with regular feedback. This allows the software to be developed step by step while remaining adaptable at all times. The project typically does not end with a one-time go-live, but rather with supported commissioning and, if necessary, maintenance and further development.

In which industries are you currently particularly active, and what specific requirements do sectors such as healthcare or manufacturing entail?

Our current focus is on medical technology, the public sector, and manufacturing. In the medical technology sector, regulatory requirements, quality assurance, and traceability are key priorities. In the industrial sector, on the other hand, issues such as integration into existing IT landscapes, scalability, and long-term stability are crucial. The public sector, in turn, often demands a high degree of transparency, sustainability, and maintainability over long periods of time.

How does ASTRUM IT ensure that software solutions remain maintainable, secure, and expandable in the long term?

The foundation for this is a clean architecture with clear structures and modular concepts. This is complemented by automated testing, code reviews, pair programming, and the targeted use of AI in the respective development environment. We incorporate security from the very beginning—both technically and procedurally. Clear documentation and transparent decision-making ensure that software remains expandable over the long term.

Which trends or technologies are currently having the greatest influence on development work?

Cloud technologies, DevOps approaches, and artificial intelligence are usually the most influential factors. They enable scalable architectures, faster development cycles, and new functionalities. For us, however, it’s always crucial to use technologies only when they offer real added value for the specific use case.

What makes a software project successful for you personally?

For me, a project is successful when it’s compelling from a business perspective, technically sound, and accepted by users. Equally important is a collaborative, transparent partnership. If the project ultimately results in working software, acquired expertise, and a solid foundation for further collaboration, then it was a success.

Thank you very much for the interview, Lutz!

Custom software is created where standard solutions reach their limits.

Are you planning a new project or looking for an experienced development partner? Let’s work together to figure out how we can turn your vision into a working application!

Patrick, what motivated you to write a book on IT security for small and medium-sized businesses right now?

Patrick: In my day-to-day work at ASTRUM IT, I see that many small and medium-sized businesses still believe they are “too small” to be targeted by attackers. The opposite is true: SMEs in particular often lack clear structures and emergency plans. With this book, I want to show that cybersecurity is an existential management issue. It’s about understanding where liability risks lurk and how to build true digital resilience through pragmatic steps. That’s exactly what we implement every day in projects at ASTRUM IT.

You say: “IT security isn’t a project, but a mindset.” What does that mean in the day-to-day operations of a company?

Patrick: Sustainable IT security only works if it’s conceived as an ongoing process: clear responsibilities, recurring audits, and emergency plans that are tested time and again. This means that risk analyses or backup tests are firmly integrated into the annual cycle. At ASTRUM IT, we support this with structured IT security audits and cybersecurity consulting, while always keeping a close eye on the current threat landscape and regulatory developments.

How do you specifically view ASTRUM IT’s role for small and medium-sized businesses?

Patrick: ASTRUM IT supports companies from analysis through to operational implementation: We identify which systems are business-critical and where vulnerabilities lie. This ranges from managed services to disaster recovery plans. We explicitly do not see ourselves as NIS 2 consultants and do not actively offer this type of consulting. Our focus is on operational IT. However, as a responsible partner, it is our duty to protect our clients: If we notice vulnerabilities in day-to-day operations that are relevant to NIS 2, for example, we proactively point out this potential for improvement. If questions arise, we then support our clients on a case-by-case basis and to the best of our ability.

In your experience, in which areas do small and medium-sized businesses most often underestimate the risks?

Patrick: A major issue is preparing for emergencies. Many companies have backups, but rarely test how quickly they can actually get back up and running. Another risk is a lack of security awareness. At ASTRUM IT, we lead by example and rely on intensive awareness initiatives as well as technical safeguards for our own employees to ensure that our team remains part of a robust security chain. We incorporate this internal experience into our general consulting for clients to raise awareness of human risk factors there as well.

What are the three measures that business owners should tackle first today?

Patrick: First, an honest assessment of business-critical systems is needed. Building on that, tested backup strategies and clear responsibilities should be established. As a third step, I recommend an external perspective, such as through an IT security audit. Here, operational requirements—as also stipulated by the NIS 2 Directive—are naturally incorporated into our work, as we always take a holistic view of security.

What is your key message to small and medium-sized businesses?

Patrick: Today, IT security is key to a company’s long-term viability. It must be understood as an integral part of the corporate culture and treated by management as a leadership priority. Investing in IT security today strengthens a company’s ability to innovate and compete.

Thank you very much, Patrick, for the interview!

It’s time to act fast! Make your company resilient against digital threats. For more information about our services, please visit our Webseite.

About the Author

Author: Patrick Fabisz
Title: “Digital Total Collapse – Why IT Security Is Not an IT Project, but a Survival Strategy for Small and Medium-Sized Businesses”
Publication Date: April 1, 2026
Available on Amazon

Laura, why did ASTRUM IT focus on the topic of accessibility?

Laura: In software development, accessibility is no longer just a “nice-to-have”—it’s a fundamental necessity. Especially with our

VISIT is a software platform designed for visitor and yard management—a product used daily by many different user groups. We want to ensure that absolutely everyone can use it. The workshop is intended to help us build a shared understanding within the team and familiarize ourselves with the technical and legal foundations.

Dominik, what made this workshop special?

Dominik: Our speaker, Simon, made the topic incredibly accessible. He is blind himself, works as a developer and tester, and showed us how he uses a Braille display or a screen reader. The live demonstration was particularly impressive, as the concrete example made it clear just how important good structuring, alternative text, and logical navigation are for the user experience when using assistive technologies.

Laura, you tested your own product, VISIT, for accessibility. How did that go?

Laura: This made the topic not just theoretical, but very concrete and tangible. Simon tested our product, VISIT, focusing in particular on the online check-in and the web UI. This allowed us to see in real time which elements are easily accessible, where there are still obstacles, and how initial improvements could be implemented.

Dominik: What was particularly interesting was that not only we, but also major providers, still face challenges when it comes to accessibility. This showed us that creating accessible software is an ongoing process that must be continually reviewed and improved.

What insights did you take away from the workshop?

Laura: A key “aha” moment came from using screen readers. For the first time, participants gained a real understanding of how blind people use software—for example, how they navigate through content, make sense of a page, and orient themselves. It also became clear how quickly and efficiently these tools can be used, but at the same time, how quickly one reaches their limits when content is not cleanly structured or technically marked up correctly.

Dominik: The shift in perspective was particularly striking: elements that are visually present for sighted users sometimes play a completely different role for screen reader users, while seemingly incidental content suddenly becomes central. A lack of semantic structure, unrecognizable interactions, or insufficient markup were thus experienced as real barriers—for example, when menus are not recognizable as such or headings have not been technically marked up correctly. This experience was complemented by direct dialogue with a person affected by these issues. The opportunity to ask questions and learn firsthand how digital barriers impact daily life was perceived as particularly valuable.

What’s next for ASTRUM IT?

Laura: This topic remains firmly on our agenda. Going forward, we want to pay closer attention to accessibility right from the concept phase and develop guidelines for our projects.

Dominik: We also want to share our knowledge within the team and perhaps help other projects at ASTRUM IT become more accessible.

Finally: What advice do you have for other development teams?

Dominik: Treat accessibility as an integral part of your development process, not as an extra task. Even small adjustments can have a big impact.

Laura: And bring in expertise early on. Workshops like this one are eye-opening—literally.

Conclusion

The workshop with Simon reminded us once again that accessibility is a central component of modern software development and goes far beyond technical details. For our VISIT team, the event provided important inspiration for making digital products even more inclusive, understandable, and accessible in the future.

Question: How has your daily routine as a programmer changed since AI tools like GitHub Copilot or ChatGPT have become part of your workflow?

Paul: My daily work as a programmer has changed significantly thanks to AI tools like GitHub Copilot. I’m able to come up with initial working solutions more quickly and find it easier to get started with new topics. At the same time, using these tools constantly exposes me to new concepts that go beyond AI. It’s now also part of my routine to continuously optimize my workflow and integrate new features of AI tools in a meaningful way.

Question: In your opinion, which skills will be more important for developers in the future: traditional programming knowledge or proficiency with AI tools?

Paul: Traditional programming knowledge will remain essential in the future as well, since it goes far beyond simply writing code. I think using AI tools will become easier and easier, and soon won’t be any more challenging than doing research online. Nevertheless, a solid foundation in programming remains indispensable.

Question: How do you handle issues like code quality and accountability when AI suggests or automatically generates code?

Paul: When using AI-generated code, it’s tempting to rely on suggestions that work without scrutinizing them in detail. That’s why thorough code reviews, where you explain your own code line by line, are particularly important. Responsibility for code quality always remains with the developer, regardless of which tools were used.

Question: Do you see AI more as a support tool or as potential competition for developers?

Paul: I currently see AI primarily as a support tool for developers. While AI tools can already handle many tasks, they often reach their limits when it comes to complex requirements or integration into existing systems. In-depth human expertise is still required here. The industry is undergoing a transformation, and I believe that the scope of developers’ work will change significantly in the future. Whether AI is perceived as support or competition is ultimately a personal matter.

Question: What advice would you give to young programmers entering an industry today that is rapidly changing due to AI?

Paul: My advice to young programmers is to first build a solid foundation of knowledge without relying on AI tools. This will make it easier to understand and evaluate code later on. AI can help identify and fill gaps in understanding, but it shouldn’t be used as an autopilot. It’s important to analyze errors in the code and understand the underlying reasons.

Question: How does ASTRUM IT specifically use AI in software development, and what experiences have you gained so far?

Paul: At ASTRUM IT, the use of AI depends heavily on the specific development team. Applications range from simple questions about frameworks and writing unit tests to specialized, specification-driven development in smaller projects.

Question: Is there an AI tool or technology that you would particularly recommend to other developers, and why?

Paul: We’re currently using GitHub Copilot, and I recommend taking full advantage of this tool’s wide range of features. When used correctly, Copilot can significantly speed up work and make the use of premium models more efficient.

Thank you very much for the interview, Paul!

AI is no longer just a trend; it has become an integral part of modern software development. However, developers’ sense of responsibility remains crucial, because intelligent tools do not replace a deep understanding—they enhance it.

How does ASTRUM IT’s VISIT visitor and yard management system support compliance with KRITIS and NIS-2?

Daniel Tripp: “Our VISIT software platform plays a central role in securely managing physical access and visitor flows in sensitive areas. In KRITIS environments, it is essential to precisely control access rights and track who was on site and when. This significantly improves security controls. This enables companies and government agencies to prevent unauthorized access and, in an emergency, quickly determine whether security protocols were followed. In addition, VISIT automates approval processes, verifies identification documents, and provides self-service terminals for efficient check-in. This prevents unauthorized access and ensures transparent documentation.”

What is ASTRUM IT’s focus in the area of hosting and IT operations for KRITIS compliance?

Daniel Tantinger: “Through our hosting and IT operations, we ensure that critical IT systems remain highly available, secure, and monitored. This includes redundant infrastructure, continuous monitoring, and rapid response capabilities in the event of security incidents. For KRITIS and NIS 2 operators, it is crucial that their systems not only remain secure but also operate stably and reliably, as any downtime can have serious consequences. Through our close partnership with noris network, one of Germany’s leading providers of highly secure data centers, we offer state-of-the-art infrastructure, industry-specific security concepts, and the highest certification standards (including ISO/IEC 27001). Data is processed in German high-security data centers and protected by multi-layered security systems as well as geographically redundant backups. This ensures that even critical applications remain reliably available and compliant with legal requirements.”

How does ASTRUM IT support information security and ISO 27001?

Christoph Weber: “Information security is at the heart of every KRITIS compliance program. We assist with the implementation and maintenance of ISO 27001-certified management systems that systematically identify and minimize risks. ISO 27001 certification ensures that security processes are not only documented but also actively implemented. A must for operators of critical infrastructure!”

What added value does the combination of these skills offer at ASTRUM IT?

Daniel Tripp: “The integration of physical visitor management, secure IT operations, and a robust information security management system creates a comprehensive security architecture.”

Daniel Tantinger: „“This enables us to offer our customers highly secure services and provide tailored solutions that meet their specific needs.”

Christoph Weber: “It provides operators of critical infrastructure with the necessary security in an ever-changing threat landscape.”

In a nutshell: What advice do you have for decision-makers in industry and government agencies?

Daniel Tripp: “Use modern tools like VISIT to address physical security vulnerabilities.”

Daniel Tantinger: “Choose professional hosting and IT operations services that minimize the risk of downtime.”

Christoph Weber: “And be sure to systematically expand your information security management system in accordance with ISO 27001—it’s well worth the effort.”

Conclusion: KRITIS and NIS-2 as an opportunity to strengthen your IT resilience

On November 13, the German Bundestag passed the national NIS2 Implementation Act. Now, more than ever, it is time to analyze risks and define areas for action. With ASTRUM IT, you have an experienced partner at your side who will guide you safely through the complex requirements, step by step. Rely on certified IT security solutions and sustainably increase the cyber resilience of your company or government agency.

Want to know if you’re affected? Simply check the BSI website, answer a few simple questions, and get a clear assessment right away.

If you have any questions about KRITIS and NIS-2, please feel free to contact us!

Further information is also available on our website and in our Video!