Sinaï Umba Di-Yaba

Context: Consulting service aimed at overseeing IT/Cyber risks and IT/Cyber vulnerability governance across the entire Credit Risk IT department.

Team: 1 consultant

Internal Stakeholders: IT Department, Operational Risk Department

Business Issues Addressed: IT/Cyber risks, transformation project, credit risk, simulator

AREA OF EXPERTISE

 IT/Cyber Risk Management and Control Consultant

 Definition of a security issue oversight governance

 Integration of security into projects: qualifying projects for security certification and monitoring compliance with criteria

 Oversight of IT and Cyber vulnerability management governance

 Oversight of resilience governance (DRP)

 Risk Management

 IT and Cyber intelligence

TECHNICAL ENVIRONMENT

 Qualys

Context: Consulting service aimed at formalizing an IT/Cyber risk map, defining and deploying a Level 2 IT/Cyber control plan, and analyzing ISO 27001 / DORA compliance.

Team: 1 consultant

Internal Stakeholders: IT Department, Operational Risk Department

Business Issues Addressed: IT/Cyber risks, Azure Cloud, deal management (Asset Management)

AREA OF EXPERTISE

 IT/Cyber Risk Management and Control Consultant

 Review and deployment of the IT/Cyber internal control framework (Azure Cloud PaaS, local network)

 Establishment and presentation of results and recommendations (local teams, IT Department)

 Formalization of the IT/Cyber risk map for the IT Department (rating, risk register, and action plan)

 Formalization of IT/Cyber procedures (incident management, DRP, change management, archiving and backup management)

 Evaluation of ISO 27001 and DORA compliance

TECHNICAL ENVIRONMENT

 Azure Cloud PaaS, Sharepoint, SaaS Applications

Context: Management of audit missions and internal control review within the framework of cybersecurity and IT themes, and assessment of associated risks at Hermès International. Missions were conducted internationally, supervising two to three consultants depending on the theme, and establishing a risk map.

Team: 1 manager and a team of 2/3 consultants to supervise Internal Stakeholders: IT Department, CISO, DIGITAL

Business Issues Addressed: e-commerce, retail, global information security

AREA OF EXPERTISE ◼ Head of IT audit missions, IT internal control review, and risk management