Filipe Alves

- Analyse documentation of Client 7 most critical plants - Lead interviews: Plants (OT network engineers, SME), Rockwell (main automation contractor), OT experts from HQ - Deliverable issuance: identify OT Use-cases to help focusing monitoring on critical & process integrity alerts, assess impact of OT Sensors placement, recommendation to add visibility on critical assets, identify additional sources to enrich logs, provide high level recommendation on LAN & Wi-Fi solutions, and a continuous improvement plan. - Reporting

- Certification activities: Vendor documentation review for the UR E27 certification (IEC 62443-3-3 and subset of 4-1 requirements), supporting client with workshops & clarifications - Pre-sales activities: introduction of UR E27 & E26 standards (certification process, technical requirements), workload effort quotation - Training: delivered trainings to BV Surveyors, support during inspections - Definition of new series of requirements for the new Notation "Cyber Secure", developed for more demanding clients/vessels

Cyber risk assessment (based on 6244-3-3, NIST CSF, Switzerland ICT minimum standard, ...) Readiness assessments to onboard MDR Claroty, Nozomi solutions. Cyber-Physical plant audit (based on 62443-2-1, 3-3 standards, vulnerability report, critical asset survey, interviews, threat modelling workshops). GRC development of OT policies & standards. Business development: pre-sales activities inc. client interviews, proposals writing, service offer development as 62443-3-3 system assessment, cyber-physical plant survey.

Pre-sales support; Product assessment against 62443-4-1 and 4-2 standards; Webinar on 62443 standards.

In charge of the detailed enginneering including: coastal suveilance system (50m height mast, RADAR S-Band & X-Band, AIS, RACON, longwave infrared camera (LWIR)), master clock, Wi-Fi Wireless (Cisco Catalyst 9800 controllers, 200 Access Points). Issuance of deliverables: system specification (spec, HLD), block diagram, power & heat dissipation budget, FAT procedure, BOM, equipment list, datasheet, manuals, review & approval of installation & interconnection drawings...

Lead all projects of the major account CMA-CGM: > Answer RfP to update 43 sites in EMEA regions on ToIP Cisco CUCM (from legacy outdated version to newest one) > Projects : lead the roll-out of Cisco Meraki access switches for the HQ; Lead the roll-out of the 43 ToIP EMEA sites & HQ to Cisco CallManager v11.5; Lead deployment of new OOB solution for both Data Centers

Projet DMZ > INITIALISATION PROJET Budget primitif & définitif 600K€, collecte des besoins (interviews, schéma directeur) et cadrage, analyse des impacts réglementaires (RGS, ANSSI, PGSSI-Santé) et interne (RSSI, PGSSI), plan projet (allotissement, planning, organisation), soutenance en CODIR, rédaction du marché et commandes > PILOTAGE PROJET - lot "Audit de conf." : déf du périmètre (équipements externes Palo Alto PA-4020, Juniper ISG1000, Switchs HPE, CentOS, Bind DNS, routeurs BGP Cisco ASR1002, Netscaler MPX, F5), consultation, approbation des livrables avec le référant, restitution, analyse de risque des vulnérabilités (méthodo RGS et interne PGSSI/EBIOS v2). - lots "Maquette" et "Déploiement" : pilotage projet PILOTAGE des Changements MCS/MCO Cleaning des règles de FW, migration NTP, upgrade Netscaler MPX, renouvellement Palo Alto 4020, WoL pour SCCM/Windows 10, ... Projet WIFI Budget primitif, consultation constructeurs et définition des besoins (Guest Access, densification/évènementiel, géolocalisation, alternative au filaire)

Engineering of ToIP / Data network / FO.SCN and ACS systems including the following tasks... General documentation: Telecom Philosophy, Interface and General Block Diagram documents. Basic Engineering documentation: Cisco DATA & ToIP system and FO.SCN. Detailed Engineering of Cisco DATA & ToIP, FO.SCN: Technical Specifications, Block diagram, Equipment List, Power Distribution diagram, Interconnection & Termination diagram, Jumpering specification, Cable Schedule, Datasheet, Operation & Manual documents. FAT procedure, Precommissioning / Commissioning and SAT procedures Technical approval of VENDOR quotations for this systems. Follow-up VENDOR progress and inspection until FAT. Supervision and Correction of VENDOR deliverables.