Marie Alessandri

- Integration of GDPR compliance principles into project delivery. Privacy By Design and Privacy By Default, context analysis, recommendations, documentation. - Privacy Impact Assessments: identification of risks, documentation, development and monitoring of remediation plans, - Personal data breach management: identification, follow-up and resolution. - Data processing register management - Drafting and implementation of policies and procedures adapted to the specific challenges and schedule of the Paris Olympic and Paralympic Games. - Organization of data protection awareness training for teams during the various stages of the Paris Olympic and Paralympic Games (preparation, delivery and closing phases). - Management of requests to Data Subject Right Requests. - Management of relations with the french data protection authority (CNIL). - Coordination with legal, compliance (ethics and internal audit) and cybersecurity teams. Participation in drafting contracts (partnerships, subcontractors).

Data privacy advisory: Ensure customers personal Data processing both comply to the GDPR and enable them to build a consistent data strategy. - Assistance to the DPO daily tasks, - Data Privacy audits and policy management (data breaches policy, Data subject request management, - Data privacy integration to the projects, - Data Privacy Impact Assessment delivery, - Data processing record implementation, - Privacy by design advisory, - Accountability practices: assistance in implementing appropriate privacy governance - Data processor control, and audits Governance, Risk and Compliance consultancy: Develop security programs for customer by auditing existing security programs; conducting gap analysis with desired final state based on the ISO 27001 and 27002 standards. - Identify, analyze and reviewing potential threats. - Provide directive for the protection of customers' assets, the adoption of risk management practices, and crisis management processes. - Risk management :Identification of customers' major assets, identification of major potential threats, risk assessment and risk treatment options.

-Conduct Privacy Impact Analysis on a portfolio of the most sensitive data processing activities. - Define PIA process: deliverables, project steps, roles and responsibilities, milestones, communication with data processing operational management. - Manage the PIA projects with stakeholders - Data Access request management process implementation. Achievement: - Delivery of 20 DPIAs

- Organization data processing activities Audit and gap analysis, - Compliance project scope identification and formal description, - Project streams identification and resource allocation: accountability, governance, IS security - Project stream prioritization

Procurement service GDPR Compliance project management. (500 providers, subsidiary companies in 14 Countries) - Contract base audit, compliance objectives identification and priorities adoption, - Risk identification and Risk management, - Compliance management monitoring, - Procurement processes review and upgrade.

- Internal governance procedure enhancement, - Customer project management. Achievements: - Internal audit and control implementation, - Mail box migration project management for a customer (10 Month duration).

- Customers hosting project management - Customers MPLS solutions deployment management - Customers follow up. Achievements: Hosting of institutional websites (Lenore, But, Valeo), European MPLS deployment projects

- Research assignment Contribution to Project Management practices applied to internal ongoing operations within different organizations (Managing Organizations by Projects), - Training delivery to Master Students, Achievements: - Contribution to the 2005 PMI study : "exploring the rôle of the executive sponsor"

- Technical support service management - Level 1 and 2 technical support - New versions test and validation - Service Level Agreement set up management

- Customer Management - WAN deployment projet management - VOIP project management - Level 1 & 2 technical support Achievements: - SDH network infrastructure deployment within 6 months - Customer Level 1 and 2 technical support contract negotiation - Technical training delivery