Emmanuel Christiann

• Group CISO deputy • Security cost rationalization (OPEX and CAPEX). Margin improvement by security integration and fraud detection. E.g. 10% of revenues saved in a pre-paid fraud in a country – Operational improvement of « Value Added Services » and « Business critical services » (E.g. mobile payment). • Security team building, security strategy definition, CSO appointment with CEO/CTO for affiliates and operational support team « Security Skill Center » for Orange group. • Risks governance with financial, marketing and legal departments. • Security fundamentals definition (KPI, objectives and strategic plans definition) • Network, infrastructure and services outsourcing project participation. • Coordination and animation of CSO network - Cyber-security and fraud – for services in production (Prepaid, data mobile, …) and also new services oriented (Mobile Payment, Mobile TV, connected house, e-health…). I developed the first end-to-end security analysis of theses value chains)

• Group CISO deputy • Activity development –from 15 to 90 audits per year, from technical to full level of security audit, from a local perimeter France to a worldwide scope, from an IT perimeter to a cross function scope • High level of support and a valuable ROI. (follow-up assistance and continual improvement support) • Team building, international staffing and direct management of international profile • Implementation leader for Information Security Management System (ISMS – 27001) • Security integration for innovating services – E.g. mobile banking services, VoD, value added services for the new Livebox . • Change management to adapt the skills of the team skill to the new security challenges.

• Methods and security controls organization for the security group. Security integration in the new services development. Risk and costs analysis for security, legal and branding • Direct management 4 people and project leader of specialists in (France, Spain, Poland and UK) • Audit reorganization and policy definition for control environment including: Compliance & vulnerability (technical and organizational); Fraud & revenue assurance (business impact analysis, business continuity plan, fraud); Regulation & Financial (SOX, LCEN, CNIL); Standard compliance (ISO 27001); Governance (methods and process) • IT Asset management & risk analysis. Global risks referential definition

• Participation to security committee for implementation in internet services • Security crisis management, definition, implementation and management • Wanadoo delegate to Security Direction (France Telecom Group): Security policy workshops + presentation to international subsidiaries & divisions managers • Strategic Network & Services assistance: Organizational, technical/functional counseling for innovative internet services • Implementation of project methods in risk management programs • Business/product owner assistance: Asset management, risk analysis, security controls definition & dashboard implementation • Financial, audit & mitigation assistance for Sarbanes Oxley compliancy. Functional assistance to Fraud & Revenue Assurance • Legal (contracts and complaints) assistance: Workshop on new regulations, usage & sale conditions • Production environment assistance & recommendations + Incident Management: Network cartography & analysis. Operational, customer support & abuse/moderation teams training. • Creation & implementation of crisis management method