Lahcen Saadani

Mission carried out as part of an IT security program for Malakoff Médéric:

• Drafting the security roadmap for the year (2014, 2015, 2016, and 2017)

• Project management (drafting the group's operational security rules repository)

• Implementation of a data anonymization solution (OPTIM)

• Implementation of a WAF solution

• Deployment of McAfee encryption solution across the group's laptop fleet.

• Implementation of a NAC (Network Access Control) solution for company network access.

• Implementation of a firewall rule management tool (Tufin).

• Deployment of a fraud detection tool (DATAIKU) (optical business)

• Implementation of a solution (KACE K1000) for deploying Windows server patch management.

• Project management for the removal of administrator privileges on group workstations.

• Study of a solution for securing unstructured data.

• Study and selection of a code review solution (Checkmarx)

• Crisis management for "ransomware" attacks.

• Overhaul of IAM (Identity and Access Management) tools to improve functional coverage, performance, and user-friendliness of the solution provided to stakeholders involved in the request management workflow.

Project Scoping after validation of the need statement:

Initiating requests with project contributors (Business Analysts, Business Units, Development, Operations).

Drafting specifications, tenders.

Monitoring tenders in collaboration with the Purchasing Department.

Overseeing external support services.

Monitoring the progress of tasks as defined in the project plan.

Tracking the completion of requests (actions, deliverables).

Facilitating technical committees and project steering committees.

Reporting to the Security Roadmap Sponsor on:

Progress of actions and deliverables,

Operational risks

Budget

Data Anonymization & Mobility Risks

Data Anonymization: (within the framework of GDPR)

• Development of the data anonymization offering for GBIS

• Facilitating workshops to prepare the scope of applications to be anonymized in 2018

• Study and anonymization of BANCS applications with the IBM OPTIM tool

Mobility:

• Inventory of use cases for remote access (worldwide).

• Review of the mobility security policy and rules

Application Morphing: Project aimed at improving the security of application access from outside the company based on geolocation principles, thereby offering controlled access.

• Development of the Application Morphing offering for GBIS

• Preparation of the POC for two key business applications (SRG/XONE)

• Facilitating workshops & defining the scope of eligible applications

• Facilitating workshops and monitoring the implementation (deadline/budget and deliverables) of the Morphing application for 8 GBIS applications.

RA2.0: Project aimed at replacing Juniper platforms with F5 platforms and optimizing VPN roles and filtering (URLs vs. IP/Ports)

• Development of a profile/application matrix.

• Development/implementation of flow matrices by Business Line.

• Participation in working groups and support for GTS on this project.

• Challenging GTS on the proposed solutions.

• Preparation of various POCs, Pilots, communications to Business Lines. Monitoring indicators.