Our experts
Strategist for integrated management systems: for transparency, resilience, and cybersecurity
For Tim Golly, management systems are not a necessary evil, but rather a strategic tool that increases a company's performance and competitiveness.

Expert for management systems
"Management systems are not an end in themselves - they are the central control instrument for safety, resilience and sustainable corporate management."
Contact:
+49 201 8999 463
Write an e-mail
Management systems translate strategic corporate goals into clear processes, roles and control mechanisms. In my day-to-day work, they are the central instrument for objectively assessing the effectiveness, transparency and controllability of organisations. In the audit context, management systems are the benchmark for determining whether companies fulfil their responsibilities in a structured, comprehensible and sustainable manner. They form the basis of almost every audit that I accompany.
My field of activity lies at the interface between technical expertise, the market and strategy. I support auditors, develop new audit programmes and ensure that TÜVIT is technically consistent and future-proof when it comes to management systems.
In addition to my internal specialist responsibility, I also represent TÜVIT externally - for example through specialist articles, presentations or customer dialogues - and position the company as a competent partner for modern management systems.
Management systems are exciting when they are not seen as bureaucracy, but as a strategic control instrument. When used correctly, they create transparency, resilience and the ability to make decisions.
What particularly appeals to me is that management systems show how seriously a company takes its responsibility - not on paper, but in practice.
Increasing digitalisation is significantly increasing the attack surface of companies. For my area of work, this means that management systems need to be more focussed than ever on cyber risks, resilience and continuous improvement. In audits today, we no longer just look at technical measures, but at whether cyber risks are recognised, assessed and managed in a structured way - which is exactly what modern management systems do.
I don't look at new technologies such as IoT or AI in isolation, but from a management and risk perspective. It is crucial that management systems are flexible enough to accommodate new risks, dependencies and responsibilities.
In addition, we have experts working across disciplinary boundaries to enable TÜVIT to better recognise and serve future developments.