Giorgi G.

Context:Within the DORA compliance program, the mission aims to identify, classify, and track all critical IT assets to ensure their security, traceability, and operational continuity. It also includes formalizing the subcontractor register, encompassing the identification of contractual information and the assessment of subcontracting-related risks.

Tasks performed:

• In conjunction with process management, assist in defining the mapping requirements to meet DORA needs.

• Specify the impacts for evolving the mapping tool.

• Verify that the impact analysis tool (internal tool) correctly accounts for all applications defined for each process, in collaboration with POs, Devs, and Lead Devs.

• Define KPIs associated with the completeness of the tool's update, and report to the mapping team the update needs so they are considered in the team's roadmap.

• Identification work for supporting assets - applications, technical systems, servers, databases, etc.

• In conjunction with the CMDB, identify the links between applications and the servers hosting them, and materialize potential discrepancies.

Tasks performed:

• Identification of critical functions supported by service providers, as well as associated IT services.

• Compilation of contractual information and assessment of subcontracting risks, by filling out subcontractor register templates in accordance with regulatory requirements.

• Mapping of application services involved in critical business processes.

Governance:Organization and preparation of workshops, implementation of KPIs and reporting for monitoring project progress and deliverables.

Environment:HOPEX, ASSYST, JIRA

Context:Within the framework of the European DORA regulation, AXA France has launched a compliance program aimed at strengthening the operational resilience of its digital activities. This mission is part of this program, with the objectives of identifying critical or important functions, inventorying IT assets, formalizing relationships with critical service providers, mastering major incident management, and ensuring the continuity of essential business processes.

Definition of the action plan for DORA implementation (project structuring, definition of schedules, action plans, and monitoring methods)

Governance:Organization and preparation of monitoring bodies (Steering Committees, Working Groups, workshops), implementation of indicators and reporting for monitoring project progress, compliance, and deliverables.

Environment:WeConform, JIRA

Context:Deployment of an E-processing tool - implementation of a contract management tool. This system aimed to automate the management of contracts and financial accounts and to increase the operational efficiency of the business team.

• Supervision and coordination of the E-processing tool deployment (contract management automation) with IT teams, business units, and external service providers.

• Management of contract integration into the tool.

• Management of performance tests and reporting of production incidents.

• Regular monitoring and control of project progress.

• Identification of risks and proposal of solutions to ensure project success.

• Suggestion of improvements to streamline contract integration and optimize tool usage.

• Creation of documentation such as operating procedures/manuals and functional/process presentations.

Governance:Implementation of indicators and reporting for monitoring project progress.

Environment:OMEGA, JIRA, SAP Signavio