atef abdelkefi

Cyber maturity assessment and establishment of the cybersecurity program that aims to secure TDF from the identified cyber risks during the Olympics. *2.1M€ budget estimation, negotiation, and assignment for the cybersecurity program *Definition of the organization and the TOM to execute the cybersecurity program. *Management and quality control of 15 projects that are required to be de delivered in June 2024: - Cyber crisis management - AD hardening security (Deployment of Semperis ADFR & DSP) - Logpoint SIEM deployment - Trellix EDR and Stamus NDR deployment - Anti-DDOS & anti-phishing deployment - Security of the OT systems (Hardening of the network components, new Radius, etc)

*Definition of the strategy & roadmap of the operational cybersecurity department at Hermès *Establishment of the first operational cybersecurity at Hermès (0 to 5 in 6 months) *Definition of the Target Operating Model (TOM) and procedures for the operational cybersecurity at Hermès *Management of the BAU (Business as Usual) for cybersecurity tools such as (Tanium, SentinelOne, CyberArk, Netskope, Imperva) *Contribution of the cybersecurity program (CyberArk International, Zero-Trust, Shadow IT)

Establishment of the first cybersecurity department at LMG. Cybersecurity was structured, before my arrival, as a division (pole) reporting to one of the Codir directors. The department reports now to the CIO and contains 2 divisions (Prevention & Protection, SOC & Resilience) Hiring of cybersecurity professionals (hired 3 cybersecurity experts and the 2 heads of divisions in a period of 9 months) *Management of a team of 12 cybersecurity professionals (project managers, GRC experts, cybersecurity architects, cybersecurity engineers, SOC managers, SOC analysts) *Management of a cybersecurity budget of 3.2M € *Active member of the “Codir” to ensure integrating cybersecurity in strategic decisions. *Establishment of cyber risk-based decision making as part of the corporate culture. *Establishment of a new operating model within the department of cybersecurity and between the department and its ecosystem. *Management and execution of a cybersecurity program of 29 projects divided into 7 main streams: - Cyber resilience (Disaster Recovery Plans, Crisis management, backup, etc) - Move to Cloud (Azure) - Vulnerability management - Sentinel SIEM for Azure - MFA & WAF for insurance services - EDR deployment - Network segmentation & segregation. - Tiering model of Microsoft

Assisting CISOs in all type of industries evaluate their organization security state and create a cyber strategy ranging from a vision to roadmaps to improve their security posture over time.

Multiple projects in multiple industries varying from security at the management level to system architecture and a broad experience. The right combination for a successful consultant.

ICS cyber-security and Risk management-ISO 27000

Network measurement data analysis for performance diagnosis: Senatus: A novel framework for automatic anomaly detection and root cause analysis. Network security DragonLab: A new framework for acessing service quality in end-to-end Internet paths. Supervised 8 Msc students.