Topic Area 5 of 6
Practical Projects
Three project cases from practical work — plus an overview of further practice areas.
Chapter 12
Project Case: WP2Shell Security Incident
- Starting Situation
- After the critical WordPress security vulnerability WP2Shell was disclosed, several websites were checked for affected WordPress versions. The goal was to reliably identify at-risk installations and professionally assess the actual level of risk.
- Challenge
- One website was found to be running the affected WordPress version. Beyond the required security update, it had to be quickly determined whether there were any signs of a successful compromise.
- Analysis
- Checked the WordPress version and assessed the known vulnerability. Carried out a full compromise assessment covering user accounts, plugins, themes, the file system, content, and additional malware scanning.
- Decision
- Immediate update of the affected installation to WordPress 7.0.2, followed by a full security review using a structured assessment procedure.
- Implementation
- Carried out the security update, verified the update was successful, and fully documented every review step and finding in a transparent audit report.
- Result
- The affected website was successfully updated to the current security level. The subsequent compromise assessment found no evidence of a successful attack. All review steps and findings were documented transparently.
- Value for the Client
- Fast closure of a concrete security risk, a reliable statement on the actual compromise status, and a transparent audit report as a basis for further decisions.
- Demonstrated Skills
- Incident response, security assessment, risk evaluation, security updates, documentation, client communication, structured methodology.
Chapter 13
Project Case: Privacy-First Website Rebuild
- Starting Situation
- An existing website was to be rebuilt, both technically and conceptually — with data protection as a foundational principle, not an afterthought.
- Challenge
- Architecture, implementation, and content had to be designed to avoid unnecessary external dependencies while keeping load time and maintainability in view.
- Analysis
- Assessed the existing structure, identified external services and dependencies, and examined options for reducing or replacing them.
- Decision
- Implementation following the Privacy by Design principle, built on WordPress, HTML, CSS, and JavaScript.
- Implementation
- AI-supported implementation for structuring, code drafts, and text modules — every change was professionally reviewed and approved before going live.
- Result
- The result was a privacy-focused website with a clear information architecture, reduced external dependencies, and a technical foundation that supports long-term maintainability, performance, and future development. The focus is not on the most modern possible look, but on a transparent technical structure that combines stability, data protection, and sustainable upkeep.
- Value for the Client
- A technical foundation that remains maintainable long-term, reduces data protection risk from the outset, and makes future development easier rather than harder.
- Demonstrated Skills
- Privacy by Design, information architecture, WordPress, HTML, CSS, JavaScript, performance optimization, data protection, technical documentation, AI-supported development, professional quality assurance.
Chapter 14
Project Case: Website Performance Analysis
Presented as a consulting methodology, not as a general web tutorial.
- Starting Situation
- A website showed noticeable performance issues whose causes were initially unclear.
- Challenge
- Metrics had to be correctly interpreted in order to address the actual technical causes rather than the symptoms.
- Analysis
- Gathered the relevant performance metrics, identified technical causes, and prioritized them by impact and effort.
- Decision
- An action plan starting with the most impactful and easiest-to-implement steps.
- Implementation
- Developed a prioritized action plan and supported or prepared the individual optimization steps.
- Result
- The result was a transparent foundation for further performance optimization, prioritized by impact, risk, and effort.
- Value for the Client
- A reliable, transparent basis for decisions on further performance investments — prioritized by impact, risk, and effort, rather than by gut feeling.
- Demonstrated Skills
- Consulting methodology, technical analysis, prioritization by impact and effort, clear results documentation.
Chapter 15
Further Practice Areas
Modular overview — continually expanded with concrete cases.
Microsoft 365 Migrations
Migration, operation, and optimization of complex Microsoft environments — with the goal of minimizing downtime and keeping users productive.
Exchange Online
Setup, migration, and ongoing operation of Exchange Online — for reliable, well-secured email operations.
OneDrive / SharePoint
Structured storage and permission concepts that make collaboration easier instead of more complicated.
Security and Data Protection
From risk assessment to concrete measures — security that actually holds up in everyday use.
Web Projects
Technically sound, maintainable websites — with an eye on usability, data protection, and long-term upkeep.
Technical Documentation
Clear documentation that's still understandable months later — for you, and for anyone who takes over afterward.
AI-Supported Project Work
AI as a tool for structuring, research, and drafts — evaluation and responsibility remain with the human.