David Larboni

Considering that 85% of the Cybersecurity incidents are due to human failure, what are you waiting for to focus on Cybersecurity Awareness ? As a keynote speaker on Cybersecurity topics for corporate events, I can provide various types of awareness sessions, tailored to your company's needs. Let's get in touch.

ISMS & Information Security Certifications – Track Record Led and delivered full-scope ISMS design and implementation, including governance, risk management, controls selection and certification support, for 6 organisations across regulated and critical sectors : - Audit & Advisory Services ––> ISO/IEC 27001:2022 - Digital Services & IT Solutions Provider ––> ISO/IEC 27001:2022 - Public Healthcare (CHU / GHT) ––> ISO/IEC 27001:2022, HDS v2 (2024) - Energy Sector (Critical Infrastructure) ––> ISO/IEC 27001:2022 & NIS2 compliance support - Gaming, Lottery & Betting Operator ––> ISO/IEC 27001:2013, WLA-SCS 2020, PCI DSS (RoQA)

I can provide your company with the following expertise : - CISO as a Service (interim management) * lead your security projects * take over the team (people management) - ISO 27001:2022 * perform risk analysis (EBIOS Risk Manager (PECB Certified)) * implement all measures related to ISO 27001 & ISO 27002 (rev. 2022) * follow-up on non-conformities * carry-out a pre-audit (ISO 19011 qualified) Clients I've worked for : - Consulting (9 months) Major independent consulting firm delivering strategic, financial, and operational advisory services. Assignment: Support ISO 27001 certification (passed February 2026) - Public Healthcare (11 months) Major hospital, dealing with 1 million medical consultations and hospitalizations yearly. Assignment: Support ISO 27001/HDS (health data) certification (passed June 2025) - Gambling (9 months) No. 1 gambling operator in France, second largest European lottery and fourth largest in the world. Assignment: Implement & support ISO 27001 / WLA / PCI-DSS RE-certifications (all obtained in July 2023) - Public Healthcare (9 months) Major hospital, dealing with 1.2 million medical consultations and hospitalizations yearly. Assignment: Interim-CISO & implement & support ISO 27001/HDS (health data) certification (obtained sept. 2022) + follow-up on 1st ISO 27001/HDS surveillance audit (passed July 2023) - Consulting (4 months) Institutional asset management and private banking company. Assignment: consulting on information security due diligence - IT service provider (4 months) IT innovation & transformation consulting. Assignment: consulting & support towards ISO 27001 certification - Insurance organisation (5 months) Group Operations is the global IT department of the leading insurance company AXA. Assignment: update the ISO 27001 key risk indicators (KRI) - BtoC services (17 months) Leading provider of professionally monitored security solutions in Europe. Assignment: Interim-CISO

As a manager, I always try to do my best to solve the following equation : Performance = Skills x Motivations x Wishes (aspirations) My style of management is a mix of participative and delegative style. If required, I will deal with a situation in a direct and decision-making mode. I have set-up the following initiatives or processes in order to : - Welcome new-joiner, help them on-board and follow their development - Implement self-evaluation of their skills in order to build a skill matrix and identify where progress is needed - Anticipate difficult situations (conflicts) by performing regular individual and collective meetings to enhance communication

Each project is a challenge to lead a team to a success : the sponsors satisfaction thanks to deliverables meeting the expectations, in a timely manner and while keeping to the budget. My assets : Acute sense to organise and anticipate ; Good management of priorities ; Ability to unite and take decisions ; Targeted and convincing communication; Service and result oriented ; Source of proposals. Main achievements : • 2001-2003 -- Management of a strategic project within the french Lottery (LFDJ - La Française des Jeux) : design and deployment of a digital screen terminal (making 98% of the turnover). I lead the design and development of a new user interface (GUI) offering many new functionalities on a touch-sensitive based screen. I coordinated the large-scale deployment of the terminal on 19.000+ POS - 2007-2009 -- Management of a project portfolio designed to enhance a major Loan Management software (Loan-IQ) - Follow-up of the quality of IT projects within the scope of my Risk Management responsibilities

• Internal Auditing (processes, projects, systems and applications) • Internal Control (implementing self-assessment processes)

Management of a strategic project within the french Lottery (FDJ): design and deployment of a digital screen terminal (making 98% of the turnover) o I lead the design and development of a new user interface (GUI) offering many new functionalities on a touch-sensitive based screen terminal o I coordinated the large-scale deployment of the terminal on 19.000+ POS