Toufik Lahmidi

For Nexans, a global leader in cable manufacturing, within the group's cybersecurity team.

I am in charge of industrial cybersecurity for cable manufacturing plants worldwide, to implement ANSSI recommendations on the OT Stream, and to secure all Nexans industrial plants globally.

I handle the industrial aspect to support cybersecurity experts in securing plants, by:

• Ensuring the link for Cybersecurity within the Nexans Industrial Community among all participants (team, plant, cyber-correspondent…).

• Participating in the definition and implementation of the industrial Cybersecurity strategy within Nexans plants.

• Supporting Nexans' Industry 4.0 program for the security of each plant by participating as an OT/Industrial expert during Self-assessments, Maturity assessments, and Mitigation/Remediation plans, with OCD (Orange Cyber Defense) and I-tracing entities.

• Participating in the definition and validation of site remediations (solutions): USB Keys (HOGO), Secure Remote Control (SECOMEA), NOZOMI probe deployment, Endpoint security (XDR or Stellar protection) …

• Leading the community of Industrial Cyber Correspondents to raise awareness in plants about industrial cybersecurity.

• Managing communication and improvement plans within plants in coordination with Cyber Correspondents.

• Defining and implementing policies and rules dedicated to Industrial Cybersecurity.

• Auditing the protection level and cyber-resilience level of Nexans plants worldwide.

• Participating in the definition of industrial cybersecurity policies, charters, and guidelines.

• Ensuring the proper deployment and continuous improvement of policies, leveraging a network of industrial cybersecurity correspondents within Nexans.

For EDF PEI, in a consortium with Vinci Grand Projet and Vinci Outre-mer.

This consortium is responsible for the construction of the 100% renewable energy power plant in French Guiana, meeting the energy needs of the region.

The new plant will run on liquid biomass and rapeseed oil.

For this project, Wartsilla will manufacture, deliver, and install the 7 generators, including the control systems and plant cybersecurity.

My mission includes:

• Intervention on the control system infrastructure;

• Intervention on industrial control systems;

• Management of PLC orders;

• Management of industrial Cybersecurity;

• Knowledge of process industry;

• Technical writing of procedure documents;

• Management of information security for the thermal power plant;

• Participate with the business unit in inventorying hardware (OT) and software (IT) present on various sites for activities such as: Access Control (Microsésame), Intrusion Detection, Video Surveillance (Milestone Xprotect Pro), BMS/GTC (Trend, Siemens, Sauter…), and Supervision (IQVision, Panorama E², PCVue…), Fire Alarm Systems (DEF, Siemens…).

• Support the business unit for the smooth execution of installation and security projects for connected building management systems: global network infrastructure planning (implementation of separate and secure VLANs, Firewall and Switch implementation), IT equipment upgrades (workstations, client stations, servers) and OT equipment (PLCs…), software solution upgrades.

• Identify various risks, prioritize them, propose and implement actions to reduce these hardware and software risks for these activities.

• Integrate identified and unreferenced IT applications into IT repositories.

• Open up rationalization perspectives by considering opportunities (contract renewal, hardware and/or software updates).

• Integrate various digital regulatory constraints or requirements (GDPR, cybersecurity, …)

• Analysis of technical risks related to obsolescence and security impact on the portfolio.

• Definition of a RACI and processes around the Catalog.

• Ensuring consistency of its content and monitoring its evolution.

• Industrializing tools for catalog management.

• Definition and monitoring of technical obsolescence indicators for the real estate portfolio.

• Definition of the overall technical obsolescence roadmap.

• Monitoring and ensuring consistency of technical obsolescence remediation projects.