Arnaud P.

Fixed-price and managed services contracts:

– Security plan for non-production data

– Overhaul of PSSI security rules and user charter

– Integration of Security in Projects (Document Management, dematerialization, digital journeys, CRM, Telephony, Electronic Signature, DORA, GIS,…)

– EBIOS RM Risk Analysis

– Crisis Management (BIA review, crisis kit, training, LCM and exercise)

– Preparatory audit for ISMS ISO27001 re-certification

– Review of S2 continuity policy

– Facilitation of the community of business DRP correspondents

– Testing and integration of the Cédralis Ring solution

– Management of the crisis unit during cyber incidents

– Planning of a cyber crisis exercise (IMAtech and IMA Protect)

– Management of the project to implement strong authentication (MFA)

– Information Security Governance (committee, documentation corpus drafting, stakeholder relationship management, change management with communication, awareness, and training)

– Integration of security into projects (process, build, and run)

– Audit and control (CPN2, security audit management, implementation of a bug bounty platform and campaign management, remediation plan monitoring, PAS implementation)

– EBIOS RM Risk Analysis

– Strategic study for the DG on data center hosting

– IT DRP and crisis management (integration with corporate BCP, recovery plan, asset mapping maintenance, backup and restore plan, crisis kit management, crisis exercise, awareness, and training)