Benoit Dee

– Manage the NIS2 program to bring the organisation to conformity and prepare for the regulatory NIS2 audit by the year 2026. The program covers technical controls, physical controls, review of the subcontracting agreements, documented processes and a technical architecture review – Map the maturity of current security controls to the CyFUN model, which is mandatory in Belgium, allowing the organisation to prepare for the NIS2 audit – Review the physical security of the Electrical cabins of the energy network – Manage & Assist during the deployment of SentinelONE Endpoint Detection and Response solution including Ranger Attack Surface Management, Ranger Insight and Singularity Identity. – Oversaw the deployment of the ARMIS Network Detection platform from Centrix. – Review the security of O365 mail with TrendMicro Email Gateway and O365 Defender – Assisted with the deployment of the Wallix PAM (Privileged Access Management) – Authored the tender for the acquisition of a CASB (Cloud Access Security Broker) and developed the relevant Security USE cases.

– Project Manager responsible for the SIEM deployment and the CTI (Cyber Threat Intelligence) project in the CRP (Cyber Resilience Program) – Coordination of the NAC (Network Access Control) deployment – Contribution to the development of a Cloud Security Approach (Federation, CASB, IM, ....) – Project Manager responsible for the Vulnerability Management and system compliancy. – Cyber Security Incident handling approach to extend the Security Operational capabilities. – Deployment of SentinelOne Endpoint Detection and Response tool on all BCL laptops. – Implementation and tuning of the Cisco Secure Network Analytics (SNA) at the BCL to offer network behavior analytics capabilities. – Implementation of the Palo Alto XSOAR, to orchestrate Event and Incident investigation and automate the handling of Phishing emails. Tuning and integration of the XSOAR with external TI services, BCL controls and ITSM tools like JIRA and Remedy. – "Solution Architect" for the Access Management (AM) approach in the IAM project.

– Mapping of policies and standards to the NIST Cyber Security Framework to create a tool for the evaluation of the maturity of the controls (CMM) implemented. – Developing the Cloud Governance through the deployment of a CASB (Authentication, DLP and shadow IT USE cases using BitGlass and O365 security) – Performing 2nd line control and Risk Analysis on solutions deployed like DDOS, Email Security, FW, Network and Zone segmentation, Endpoint Detection and Response, BleuPRISM process automation, UNIT 4 SaaS accounting platform and the Managed File Transfer platform. – Creation of several security policies and standards needed to achieve compliancy with the Belgian National Bank Directive 2015-32 and the GDPR regulation. – Development of a Taxonomy of operational security threats for the IT environment and perform recurring high-level Risk Assessment of certain IT infrastructure components. – Defining the functional and business processes for the identity creation and the access management of the various business software through the IAM using BPMN (Business Process Model and Notation). – Helping in the creation and analysis of the RBAC model for implementation in the IAM. – Helping the IT department with the analysis of the Cloud strategy and the development of an RFP for the CASB including the vendor capabilities and the USE Cases that must be addressed by the responses. – Quote the different CASB RFP responses and evaluate which vendor-service provider partnership best suites the needs of Ethias. – Evaluate the quality of the implemented Security Controls (FW, WAF, Proxy, PKI, Email GW and RA-VPN) and see how the NIST Critical Infrastructure Cybersecurity framework controls are covered. – Helping with review of the Incident Management Process needed to improve the quality of the Security Operations Centre (SOC)

– Deployment of a ESX based lab needed to POC (Proof of Concept) all security solutions in the Security Roadmap and deployment of Checkpoint 77.30 VE + IPS blade, F5 VE, Sourcefire IPS VE and the different tools involved in the various security POC's – Development of the IPS Strategy and deployment of Sourcefire 5.4 and Checkpoint FW's + IPS blade (R77.30) at DBG – Malicious Code Protection POC to analyse various Sand Box Technologies to integrate into the existing security infrastructure. Comparative analysis between Checkpoint Threat Emulation Appliance, FireEye and TrendMicro Deep Discovery. – Deployment and design of Checkpoint Threat Emulation Appliance and the FireEye solution into the DBG group infrastructure (surfing and web traffic) – Fine-tuning of the Security Policy of the Bluecoat Web Proxy infrastructure – Comparative analysis and POC of various Endpoint Protection and Response tools like FireEye HX, Carbonblack server, Tanium, Guidance Encase, Sentinel1 and Bromium – Deployment of TrendMicro Deep Security HIDS 9.6 on all internet facing webservers – Deployment of F5 LTM for load balancing and the ASM as a WAF solution – Integration of all Security solutions with the SIEM solution ARCSight – Migration of Nokia-Checkpoint clusters in R65 to a virtualized environment based on Crossbeam and Checkpoint VSX R67 and Provider-1 R75.20 for management. – Migration of proxy servers from Bluecoat ProxySG and TrendsMicro IWSS to Cisco Ironport Web Security Gateway, with an embedded Webroot and Sophos for malware scanning. – Setup of a new Juniper SA (version 8.0R2) environment for SSL based remote access – Implementation of AlgoSec AFA and FireFlow for firewall security management (version 6.5) – Migration of Checkpoint Provider-1 to R77 on GAIA and implementation of the Identity Awareness blade and the App Sec blade for in depth application control.

– Setup of Remote Access VPN's between Apple iPad & iPhone devices and Juniper SA SSL VPN. - and Integration of MobileIron VSP and Sentry for remote devices management (MDM) – Adaptation of Checkpoint FW environment and Fortinet Fortigate clusters, to allow the MDM (mobile device management) flows. – Upgrade of Infoblox NIOS 5.1r2 to 6.1.5 to resolve a security Vulnerability – Migration of Cisco ASA firewall to version 8.4 and ASDM 6.4 in various environments. – Upgrade of Bluecoat ProxySG 8100 with SGOS 5.4.6.1 based on Websense URL filtering to a ProxySG9000 on SGOS 6.2.3.1 using Bluecoat Webfilter for URL filtering. – Review and implementation of new policy for web surfing on the new Bluecoat Proxy-servers. – Upgrade of Checkpoint FW modules from R62 to R71.40 after conversion from flash-based systems to HD based FW modules. – Implementation of F5 LTM load balancing to replace the Cisco ACE modules – Deployment of a new Secure file transfer infrastructure based on Globalscape EFT – Setup of Access VPN's between Apple IPad devices and Juniper SA SSL VPN.

– Involved in various business projects for the network security departement

– Participation in the GPRS architecture redesign based clusters using virtual systems.

– Project Team Manager TESTA (Trans-European Service for Telematics between Administrations) for the EC.

– Working at the IT-Security Projects team taking care of: – Managing various bussiness projects which implicate logical and technical changes in the firewall security architecture. – Writing of the Intrusion Detection System emergency response procedures. – Responsible for the deployment of extranet VPN with partners and subsidiaries in Poland, Luxembourg, Ireland, UK & US. – Planned and coordinated various migrations of the firewalls. – Designed and performed the setup and configuration of the new lab environment. – Co-Design with the other team members of the new Fortisbank worldwide FW security model. – Wrote procedures for the Operational Support of the various security tools. – Deployed Content Analysis and virus-scanning – Development of a new IDS strategy. – Responsible for the 3rd-level troubleshooting of the products managed by the firewall security project team.

– Responsible for the development and teaching of the following courses: – E-commerce introduction and business strategies (1 day) – E-commerce applications (2 days) – Virtual Private Networking (2 days) – Teaching the product courses: – Introduction to Checkpoint Firewall-1 4.0 & CP2000 – Advanced Firewall-1 4.0 & CP 2000 – Introduction to Meta - IP 4.x – Introduction to Bandwidth Management using Floodgate-1 4.x

– Responsible for the Networking services within the pre-sales department.

– Business design consultant in the Custom Development business unit.

– Member of the Assisting Academic Personnel at the center for Business-IT in the faculty of Economical, Social & Political Sciences.