Kevin Sama

Axa Climate wishes to bring its service offerings into compliance with the SOC 2 standard. To this end,

several projects have been identified, including the formalization of security processes.

Bpifrance has assembled a team of information system security experts. The objective of the mission is to support

product owners and business units in managing their risks.

in line with IS directorate objectives

Context: The AEMEA group acquired the French subsidiary of Aviva PLC Assurance. Following this acquisition, the rebranding led to several transition projects, including the deployment of security tools for the Abeille Assurance SOC.

Work performed:

Implementing the SOC services deployment strategy: EDR Cybereason, EDR Defender (for Endpoint, for Mobile, for Firewall, for Identity), Qualys, MDR Atos on servers

Managing all phases for the implementation of SOC services: design, implementation, pilot, mass deployment on servers

Project management: understanding objectives, tracking actions, managing service providers, reporting, escalating alerts, managing schedules

Managing all phases for the implementation of CNAPP services (cloud asset security)

Implementing a awareness strategy

Managing a phishing test campaign with "Avant de cliquer"

Formalizing the Information System Security Policy (PSSI)

Formalizing a Security Assurance Plan (PAS)

Formalizing an exception management procedure

Formalizing run processes (MCO/MCS) for SOC tools

Implementing a SOC service catalog (presentation of services, description of service operation, SLA)

Environment: EDR Cybereason, EDR Defender (for Endpoint, for Mobile, for Firewall, for Identity), Qualys, MDR Atos, SIEM AISAAC, MS Office, JIRA, Service Now [IMAGE] [IMAGE] [IMAGE] [IMAGE] [IMAGE] [IMAGE] [IMAGE] [IMAGE] [IMAGE] [IMAGE]