laurie BASTA

Compliance - Audit - Cyber Program Management Security Architect - R&D - Security Product Development -THALES ALENIA Space, Cyber Security Manager (program level) • Define at program or product level the cyber action plan • Compliance (ESA - Regulation - TAS) • Product or Program Cyber security KPI production • Ensuring Cyber security coordination, relevant documentation, production and participation at project milestones and reviews following the engineering process (Security Risk Analysis , Security Management Plan ) • Cybersecurity audit -Schneider Electric, Cyber Resiliente Act Support • cyber act compliance + action plan -BNP CIB, Bank, Production Security Officer • Provide transversal assistance to Production Security Teams (SOC/SIEM/CSIRT) • In charge of security service delivery for the cloud transition. • Russian Project: Adapt security service implementation and delivery for BNP Russia ( impact of the international sanction)

Main point of contact for the Digital Factory Unit for all the Security aspect. - Collaborate / Interact with IT Disciplines efficiently - Evaluate the security of suppliers - Secure architecture : validation and review - Provide security expertise to IT , R&D teams and business - Risk analyzes for internal project

. Advise on the choice of technical solutions . Evaluate the security of suppliers . Review and evaluate security aspect for internal project (Architecture - Secure by Design) . Define and maintain Information Security Guidelines and standards - Authentification & Cryptographic . Drive security aspect of the Cloud Transition for the Group: Define security process and tools selection.

In charge of proposals evaluation for Research and Innovation programme fund H2020: -Evaluate project proposals applying for EU funding. -Provide an assessment of project’s progress

Development of the cyber security unit: Product Line Leader: set-up team, process, department, infrastructure and security Access. European project H2020 SCISSOR: definition of the proposal project (financial and technical), win the fund with best note in cyber security category (4M euro budget - 8 partners), co coordinator of SCISSOR (www.scissor-project.com) Project Director / Coordinator / Management Board for H2020 SCISSOR: . Administrative management: legal, financial and administrative organization . Technical management: - Work package relative to the development of a key Management system - In charge of the SCISSOR architecture. - Responsable of the coordination and integration of technical partners contributions.

Set-up Development Team For TRUSTY Line Product: • Create and manage the development platform (architecture, design, installation and documentation) - Manage, specify the software evolutions - Plan and provide the transfer of knowledge to the local team: on products (dev and run), platform and software process: DevSecOps - HSM configuration, PKI and certificat installation. - Coach and guide the team members (6 people) Skills: C, Makefile, QT, SQL DB, autoconf, axis Cryptography: Finite Field, Elliptic curves and schemes, Large Integer, Protocol ECDSA, ECIES, Diffie-Hellman, Identity-Based-Encryption, Pairing and schemes. Software Development : Development of an Asymmetric Cryptographic System: • Project Management - Project charter, objective, budget - Plan definition and achievement - delivery - Coordinate the different department’s interaction on the project - Monitor the follow-up on the work progress • Cryptography: - Survey on pairing: computation, curves, and characteristic - Implementation of cryptography libraries - Support team members on cryptography implementation (5 people) • System & Software - Survey - Architecture - Web Service Skills: Java, C++, Junit, XML-XSD Tools: Maven, Subversion, Continuum, Proximity, Oracle, VMware, LDAP Hardware: HSM

• Development of certified products (EL3+) performing security functions as electronic signature, encryption (TrustySign and TrustyPlatform) and generate certificate (TrustyKey) • Apply common criteria, specifications, conception, interface design, implementation, unit test cover, installshield and release Functionalities: Signature, Encryption, Verification and Decryption, Generate, revoke, renew, publish, ... certificates Technologies: Java, C++, Swing, Eclipse, Junit, Web services Tools: Maven, Subversion, HSM, SSL, Tomcat Oracle, LDAP, installshield Libraries: BounyCastle, Log4j, ResourcesBundle, xml-security Standard: X509, PKCS11, PKCS12

• In charge of the design, maintain and optimize a critical communication system used to manage national electrical network of France which has to be maintained in all circumstances. • Specification, development, test, deployment Skills: C/C++, korn-shell, bash, SQL, Ingres

• State of art on Ad Hoc network (Wireless community network, Ad Hoc routing protocols, Delay Tolerant Network, MANET and sensor network) • Optimization of a broadcats protocol efficient in energy for Ad Hoc network • Development on Omnet++ • Performances improvement + 60% Skills: C++ Tools: Omnet++