Skander Maalej

Enhancing operational resilience:

• - Coordination and management of IT disaster recovery (DRP) and backup restoration exercises: scoping, execution, reporting, and lessons learned. Ensuring compliance of the ISP portfolio projects with IT resilience requirements: validation of DRP and Backup architectures on On-premise, AWS, and Azure architectures, compliance with DORA standards, contractualization of commitments, evaluation of selected technologies. Performing GAP Analysis and compliance studies with DORA (Digital Operational Resilience Act) requirements. Contribution to the update of the BIA campaign: coordination with business units, consolidation of RTO/RPO, and formalization of critical dependencies. Organization of crisis management exercises: definition of scenarios, facilitation of crisis cells, and formalization of action plans. Revision and enrichment of the crisis management documentation corpus: Crisis Management Plans, Quick Reference Guides, Escalation Procedures. Deployment of a Business Continuity Plan (BCP) without IT reliance in an industrial multi-site context:

• -

• - Business Impact Analysis (BIA) conducted on factories and the supply chain: data collection and analysis from business units, definition of critical processes. Mapping of continuity risks and definition of relevant crisis scenarios (machine breakdown, critical supplier disruption, personnel unavailability, etc.). Identification of major event taxonomy, structuring of associated business impacts, and definition of crisis thresholds. Drafting of degraded manual procedures per key process, in collaboration with plant managers and supply chain referents. Organization and facilitation of a BCP simulation exercise without IT: testing manual procedures, activating backup plans, and collective lessons learned.

Supporting Savencia in defining and formalizing business continuity arrangements for several industrial sites, with a focus on IT system loss scenarios.

Mission Objectives

Ensure critical business activities continue in case of IT unavailability

Reduce operational impact on production sites

Structure pragmatic business continuity plans applicable by field teams

Strengthen the operational resilience of industrial sites

Scope

Savencia industrial sites (notably Ducey, Illoud, Vihiers, Condé)

Disruption scenarios related to the loss of central IT / critical IT solutions

Work Performed

Analysis of critical activities and IT dependencies per site

Identification/prioritization of risks related to system unavailability

Definition of degraded modes and business continuity procedures

Formalization of PUPA (Urgency and Business Continuity Plans) – V0 version per site

Proposal of resilience measures (redundancy, backup, crisis organization, communication)

Structuring of post-incident recovery plans (return to normal)

Awareness/training of teams on continuity reflexes

Implementation of a continuous improvement logic (lessons learned, effectiveness monitoring)

Deliverables

PUPA V0 per site

Business continuity procedures in case of IT loss

Operational tools/templates for crisis management and recovery

Resilience improvement recommendations

Value Provided

Highly operational approach, adapted to the industrial context

Cross-functional view of business, IT, and crisis management

Strengthening of sites' ability to maintain production despite IT unavailability

Principal consultant working with major banking and insurance players on business continuity, operational resilience, and risk management challenges.

Managing and executing scoping, evaluation, and implementation missions for continuity arrangements, in coordination with business units, IT, security, risk functions, and management.

Key Responsibilities

Conducting Business Continuity Management (BCM) and operational resilience missions in critical environments

Performing/updating BIAs (Business Impact Analysis) and mapping of critical processes/activities

Defining continuity and recovery strategies (RTO / RPO, crisis scenarios, workarounds, degraded modes)

Developing and structuring BCPs / DRPs / recovery plans (business, IT, crisis)

Facilitating workshops with stakeholders (business, IT, security, production, risk, compliance)

Preparing and conducting crisis exercises and continuity/recovery tests

Supporting compliance with regulatory and normative requirements (e.g., DORA, ISO 22301, internal requirements)

Producing governance deliverables: policies, methodologies, dashboards, action plans, and monitoring reports

Advising management on strengthening the resilience of critical services and the dependency chain (providers, IT systems, infrastructure)

Added Value

Strong ability to bridge business challenges, IT constraints, and regulatory requirements

Structured, pragmatic, and implementation-oriented approach

Cross-sectoral experience in demanding contexts (banking/insurance) with a strong focus on crisis management and operational continuity