Morgan Matrat

Sector: Banking & Insurance

Summary: €16 billion turnover, €4 billion net income, 31 million customers, 4,400 branches, 80,000 employees.

Crédit Mutuel Alliance Fédérale is a mutualist banking and insurance group comprising the 13 regional Crédit Mutuel banks, European Bank of Crédit Mutuel, CIC (Worldwide), Bank of Luxembourg, Banque Transatlantique, Targo Bank (Germany), Beo Bank (Belgium), Cofidis, Mona Bank, Bank of Tunisia, Créatis, and Synergie.

Within the CISO team, newly created in March 2024 and reporting to permanent control:

- DORA Project Management

- Facilitation of Steering Committees, workshop preparation

- Definition:

o ICT Risk Management Framework: committee structure, CISO roles and organizational structure, ICT risk outsourcing arrangements

o Digital Operational Resilience Strategy: risk appetite, preventive measures and major incidents, risk indicators and digital operational resilience testing

o Group Security Policy

o Security Document Register: strategies, policies, procedures, charters, registers, plans

o Committee Charter, role descriptions, RACI, SWOT, etc.

- Definition of the digital operational resilience budget

- Coordination of stakeholders in projects

Technical Environment

- Databases: DB2

- Systems: Windows, IBM

- Languages: Angular, Java JEE, PHP, SQL

- Standards used: Dora, NIST V2, ISO 2700X, ANSSI Guides, CM Security Policies

- Tools: M365

Dire is a Strategy, social media, influence, and content production agency based in Paris.

To strengthen its security posture, the agency requested:

- An EBIOS RM Risk Analysis

- An IS Policy

Crédit Agricole Assurances is a bancassurance company created in 2009, bringing together all of Crédit Agricole's insurance activities. The company generates approximately 80% of its turnover in France, where it is the leading national insurer by premium volume.

• 1st bancassurance company in Europe and France.

• 1st insurer for personal and individual protection in France.

• 2nd insurer for home and retirement savings in France.

Security support for projects:

• Project management for risk analysis support

• Strategic and Critical Risk Analyses

• Definition of security requirements to be applied

• Definition of a risk management framework compliant with security policies

• Risk analyses ensuring the compliance of the security system with regulatory requirements