Ismael D.

Outsourced CISO & GDPR Expert – VSEs/SMEs and regulated professions

I help organizations (VSEs/SMEs, Territorial Hospital Groups including several university hospitals, clinics, private healthcare structures, etc.) structure their cybersecurity and GDPR compliance, without blocking business.

Specifically, what I implement for you:

– IS Security Governance: roadmap (master plan), committees, indicators, IS Policy, supplier clauses, approval.

– Security Operations/Maintenance: patching, hardening, backups, logging, monitoring.

– Awareness: anti-phishing workshops, transfer fraud, best practices for business teams.

– Incident & Crisis Management: runbooks, drills, on-call duty, coordination with service providers.

– Project Security: security clauses, Privacy by Design, architecture reviews, integrating security "by design" especially with third parties (provider chain).

– Simplified EBIOS RM risk analysis with a prioritized action plan.

– GDPR Compliance: processing register, Data Protection Impact Assessment (DPIA), clauses, policies, IT charter.

My usual playing field:

– Healthcare sector (public/private) and sensitive VSEs/SMEs;

– Island context (La Réunion) and multi-site management;

– Coordination with IT departments, business units, service providers, and management.

I can assist you with:

– achieving cyber and GDPR compliance,

– the role of outsourced CISO,

– team coaching and user awareness.

I also leverage a platform I developed (Cyberclair) to track compliance and risks in a simple and structured way.

Remote assignments (FR), with possible travel if needed.