Arnaud P.

Fixed-price and managed services contracts:

– Production data security plan

– Redesign of PSSI security rules and user charter

– Integration of Security in Projects (DMS, dematerialization, digital journeys, CRM, Telephony, Electronic Signature, DORA, GIS,…)

– EBIOS RM Risk Analysis

– Crisis Management (BIA review, crisis kit, training, MCO and exercise)

– Preparatory audit for ISMS ISO27001 re-certification

– Review of S2 continuity policy

– Facilitation of the community of business BCP correspondents

– Testing and integration of the Cédralis Ring solution

– Management of the crisis unit in the context of cyber incidents

– Planning a cyber crisis exercise (IMAtech and IMA Protect)

– Management of the project to implement strong authentication (MFA)

– IS Security Governance (committee, documentation drafting, stakeholder relationship management, change management with communication, awareness and training)

– Integration of security in projects (process, build and run)

– Audit and control (CPN2, security audit management, implementation of a bug bounty platform and campaign management, remediation plan tracking, PAS implementation)

– EBIOS RM Risk Analysis

– Strategic study for the Board on datacenter hosting

– IT DRP and crisis management (integration with corporate BCP, recovery plan, asset mapping maintenance, backup and restore plan, crisis kit management, crisis exercise, awareness and training)