Aziz Touré

CISO on demand / Virtual CISO

 

• Executive reporting




• Cybersecurity strategy




• 3rd party risk management strategy

Governance & Risk Management

• Business Impact Analysis (BIA), asset management, risk identification, risk assessment, risk mitigation and acceptance, data classification




• Cyber security projects, project delivery acceptation criteria’s




• Security policies conception and optimization, end-user awareness program




• Business Continuity, vulnerability & Incident Management

Audit / Compliance

 

• ISO 27001/ ISO 27005, SOC2, PCI-DSS




• Privacy / Data Protection : NIST, ISO 27701




• Gap analysis, maturity assessment, audit action plans

Security Architecture

• Security controls : endpoint security, Data Loss Prevention (DLP), encryption, anti-spam, internal threats




• Pentesting operations




• SOC operations monitoring

Cloud Security & Architecture

• Security audits & controls performance review




• Azure & Microsoft 365 security, AWS Security




• Resources & cost optimization

2010 - 2014

Bachelor of Science in Information Technology

Supinfo International University, France