Sylvain Lemanski

■ Context: In April 2023, after two years on assignment at DNI/Organization, the CIO decided, for organizational and optimization purposes, to place authorization management under the SSI.

■ Responsibilities and Actions:

o Facilitation of authorization committees.

o Leading Business Owners in their authorization reviews.

o Drafting of authorization management procedures.

o Liaison with statutory auditors and internal control.

o Updating the IT authorization management procedure.

o Leading IAM governance with Sailpoint Identity IQ.

o Leading governance of privileged access for insurance business software.

o Leading governance of privileged access for support software (accounting, HRIS, etc.).

o Leading governance of privileged access for technical software.

o Guaranteeing IAM and non-IAM authorization reviews.

o Analysis and definition of IAM role automation.

o IAM data management.

o Implementation of DORA compliance in IT procedures and processes

■ Impact and Value Created: Complete structuring of group-wide authorization governance (over 7000 identities managed, over 100 certification campaigns managed annually for 4 years, and several thousand AD rights integrated into management through IAM roles), reduction of audit risk, and sustainable improvement of access control.

■ Context: In 2018, the Up Group deployed the Office 365 suite across all its countries. Following this, the Group wished to have a new intranet on SharePoint modern experience. This intranet was to be the entry point for all Group employees worldwide and also combine a large number of digital functionalities offered by Office 365, eventually becoming a true Digital Workplace.

■ Responsibilities and Actions:

o Assisting business units (HR and Communications) in implementing the new Group intranet based on SharePoint modern experience and the Office 365 collaborative tools ecosystem.

o Facilitating and centralizing IT department actions for this project by managing all the technical actions necessary for its implementation, e.g.: architecture audit, audit of various Active Directories and data quality, security and GDPR compliance audit, integration of the project into Azure DevOps, change management, participation in and support for various validation committees, setup and facilitation of project steering and monitoring committees, participation in the development of functional and technical specifications, and their validation, functional testing, deployment, setup of ongoing maintenance, third-party maintenance, and the support chain.

o Establishing deployment procedures for the intranet to all Group subsidiaries (19 countries in total), auditing subsidiary Active Directories to validate prerequisites, and managing the deployment.

■ Impacts and Value Created: Industrialization and security of the Digital Workplace, improved user adoption, and identity governance.

■ Context: Management of digital projects related to on-street parking control.

■ Responsibilities and Actions:

o Management of web and mobile projects in a regulated environment, identification and coordination of different stakeholders (service providers, internal employees, authorized representatives, local authorities, etc.).

o Management of updates, incidents, and operational support.

o Implementation of GDPR for Front Office elements.

■ Impacts and Value Created: Increased reliability of operational tools and security of personal data.