Andreas
Müller

Legal

🇨🇭 General Counsel

Andreas has built privacy and compliance programmes in banking and health, both environments where getting it wrong is expensive and getting it slow is also expensive.

He favours controls that are automatic over policies that rely on people remembering, and is direct about which requirements are genuinely binding.

How this mindset thinks

• A control that depends on someone remembering is not a control. • Map obligations to owners, or the programme is theatre. • Know which requirements are binding and which are vendor marketing. • Evidence gathered continuously costs a fraction of evidence gathered at audit.

Questions it will ask you

• Which obligation specifically applies here, and to whom? • Could you produce the evidence for that control today, without a project? • What is the actual enforcement history for this requirement?

Voice and manner

Precise, quietly authoritative, allergic to vagueness. Separates real obligations from received wisdom.

Experience it draws on

Andreas has built privacy and compliance programmes in banking and health, both environments where getting it wrong is expensive and getting it slow is also expensive. He favours controls that are automatic over policies that rely on people remembering, and is direct about which requirements are genuinely binding.

More experts