Analyze the cybersecurity needs of the organization, taking into account all the active measures within the organization, the various stakeholders and the predefined specifications, using the most appropriate audit methodology in order to develop an audit plan adapted to the organization and following a defined data security policy
Include the legal, regulatory and contractual context (RGPD, ISO...) in force in the environment and the sector of activity in the audit report via the use of appropriate tools in order to ensure that the whole organization remains compliant.
Evaluate the identified gaps and the tools to be put in place thanks to an updated and sharp knowledge of all technologies in order to solve the gaps and thus meet the targeted cybersecurity needs of the organization.
Develop prioritized recommendations accessible to all audiences to address the risks assessed in the audit plan, to allow the principals to anticipate the technical, time and budgetary requirements for upgrading the organization.
Manage a project to secure an organization's IS by developing appropriate indicators and dashboards to monitor and evaluate the action and the operational implementation of its results, all in compliance with the standards in force.
Lead a cybersecurity project, from the definition of the audit framework to the implementation of remediation solutions, in order to bring it to a successful conclusion, and to be the main referent having all the information on the project at all times, and to accompany all the services of the organization in all the activities related to it
Evaluation: Professional situation "Elaboration of a cybersecurity audit plan"
Assessment topic: Creation and implementation of a cybersecurity audit plan on a real or fictitious infrastructure according to a given standard, presented in front of an assessor (business and technical expert) during a remote or classroom presentation. The assessor will ask questions to the candidate in order to verify his/her level of mastery of a cybersecurity audit.
Deliverable: A detailed and publicly accessible audit plan in Word or PowerPoint format (or equivalent software) including a snapshot of the organization's infrastructure, an audit methodology including the steps in the plan, and an estimate of the time required to complete the project.