Brice Gilbert

Assisting organizations in cyber (GRC) and digital risk management for certification or compliance with the following standards and frameworks: ISO 27001, HDS, ISO 27701, EN 17926, ISO 42001, TISAX, ISO 21434, DORA, GDPR, AI Act,... Performing risk analyses according to EBIOS RM, ISO 27005, ISO 23894 methodologies,... Conducting internal and certification audits. Delivering training.

Main existing certification/labeling/qualification services under my responsibility:

- Information Security: ISO 27001, SecNumCloud (ANSSI), Label ExpertCyber (cybermalveillance.gouv.fr), ISO 22301 (business continuity), TISAX, ISO 21434 (automotive cybersecurity)

- Privacy/GDPR: HDS, ISO 27701, AFAQ Personal Data Protection

- Artificial Intelligence: ISO 42001

Activities performed:

• Management of service operations (quality system): maintaining COFRAC accreditations, internal staff training,...

• Expertise in my areas: leading the auditors' community, conducting audits, reviewing and validating audit reports from other auditors, representing AFNOR to authorities and expertise hubs (ANSSI, Campus Cyber, CEFCYS, Club ISO 27001, CLUSIF, Standardization Commission), developing new certification/labeling services in partnership with public or private entities,...

• Promotion of our activities: executing the annual marketing plan to promote services, speaking at workshops and webinars related to Digital Trust themes,...

Responsible for European certification programs for automated systems and their software (English-speaking position):

• Writing and updating in English the reference documents describing certification rules

• Conducting statistical studies on test results data to support the evolution strategies of certification rules

• Leading development meetings in English with certified manufacturers and partner laboratory members

• Active regulatory and normative watch

• Software audits