Greater Paris Metropolitan Region
I lead the CERT of Crédit Agricole Group. When a major incident hits one of our entities, my team investigates it, qualifies it and coordinates the response. WHAT I DO Compromise analysis, attack campaign tracking, threat intelligence, operational coordination with SOC and business teams, reporting to the Group CISO and executive committees. The visible part of a CERT is incident response. What decides the outcome was built before the incident: detection coverage, escalation procedures, interfaces with the business, the team's ability to sustain the pace over time. BUILDING AND ASSESSING RESPONSE CAPABILITY I am a SIM3 Certified Auditor. The model assesses the maturity of an incident response team across four parameter families: organisational, human, tools, processes. This is what I most willingly work on outside my role: sizing an on-call rotation, investment trade-offs in a CERT, the recurring design mistakes of newly created CSIRTs. RADIOCSIRT I founded RadioCSIRT in August 2024. An independent daily cybersecurity news podcast, over 700 episodes in two years, in French and English. It covers actively exploited vulnerabilities, national agency advisories and vendor-documented campaigns. A weekly newsletter extends the podcast and I publish long-form analysis on my blog. radiocsirt.org blog.marcfredericgomez.com BACKGROUND 30 years in IT, the last 10 exclusively in cybersecurity. Before the CERT: sensitive infrastructure, critical systems and PCI DSS compliance, in banking and industrial environments. Previously with Microsoft France, Société Générale and Crédit Agricole Cards & Payments. Executive MBA, École de Guerre Économique. GET IN TOUCH Conference speaking, discussions on building a CSIRT, SIM3 maturity assessment: direct message here. RadioCSIRT: [email protected]
Leading the Computer Emergency Response Team (CERT) for the Crédit Agricole Group in an international environment, serving over 142,000 users and more than 79 group subsidiaries on 47 countries. Nature of Work: 50% operational, 50% management, with direct reporting to the Group CISO and IT Group Board. Security Strategy: Implementing the group's security strategy and managing the budget for the team and all CERT-AG contractors. Key Responsibilities: - Team leadership for incident response. - Cybercrime investigation (Threat Intelligence) - Computer and network forensics. - Malware reverse engineering and IOC (Indicators of Compromise) detection. - Information security and vulnerability monitoring. - E-reputation and social networks monitoring. - Tools for CSIRT/CERT. - Managing aspects related to SWIFT, SEPA, PCI-DSS. - Incident reporting for BCE, LPM. - SIM3 Certification
Greater Paris Metropolitan Region
Founded MG Consultants with two associates, specializing in international projects related to PCI DSS, infrastructure (Security, DataCenter, Virtualization, Virtual Desktop, and Nagios monitoring). Led high-profile projects across various sectors, emphasizing security and IT infrastructure optimization. Responsibilities: - Project Leadership: Directed a key project for the 3rd largest European bank, achieving initial PCI certification for DataCenters, network, and card payment applications. - Project Management at Société Générale: Successfully managed a Citrix project, ensuring seamless integration and functionality. - International Projects at Cap Gemini Outsourcing: Oversaw Citrix and Tivoli projects across Denmark, India, and France, demonstrating global project management capabilities. - IT Transformation at Taores (Mutuelle Générale): Guided the transition of all IT infrastructure to IAAS/SAAS solutions in collaboration with ATOS. - Financial and Resource Oversight: Accountable for budgeting, resource allocation, and planning across all projects. - ITIL Framework Implementation: Implemented and adhered to ITIL best practices in all project phases. - Crisis Management: Led teams to revitalize stalled projects in socially complex situations (mergers, strikes, etc.). Key References: - Cap Gemini Outsourcing - Mutuelle Générale (GIE TAORES) - Société Générale - Credit Agricole Card and Payments - Limonetik - MNCAP - Schneider-Electric
Launched CTN1 in March 2003 to revolutionize the dedicated server market by offering services at highly competitive prices. Pioneered in providing servers at €49 per month with 100 Mbps bandwidth, a significant advancement compared to the standard €200 per month for 10 Mbps offered by European competitors at the time. Responsibilities: - Strategic Negotiations and Sales Management: Led the negotiation and sales processes, effectively managing client relationships and board interactions. - Data Center Selection: Made key decisions on data center locations based on technical and financial evaluations. - Infrastructure Management: Oversaw the management of over 1000 servers, ensuring optimal performance with a lean team operating 24x7 throughout the year. - Virtualization Solutions: Implemented VMWare solutions to enhance server efficiency and reliability. - Open Source Expertise: Specialized in open-source server solutions, contributing to cost efficiency and customizable service offerings. - IT Security and PCI DSS Compliance: Ensured rigorous IT security standards and compliance with PCI DSS requirements. Key Achievements: - Rapid Growth: Achieved a milestone of renting over 500 servers within the first 6 months without any advertising. - Infrastructure Expansion: Established two mirrored data centers equipped with BGP Networks and Peering Network, demonstrating a successful scale-up from scratch. - Market Challenge: Successfully entered and made a significant impact in a highly competitive market, offering innovative and affordable solutions.
Founded Linux Motor as my first entrepreneurial venture, with a mission to establish a dedicated helpdesk company serving Linux editors and customers. The company catered to prominent clients including Mandrakesoft, Red Hat, France Telecom, Goodyear, Macmillan Editions, and others, during a pivotal time in the open-source movement (1998-2003). Responsibilities: - Executive Leadership: Guided the company as its top executive, overseeing all strategic and operational aspects. - Open Source Evangelism: Actively promoted the use and adoption of open-source solutions, contributing significantly to the open-source movement. Sales Direction: Led sales strategies and operations across France, the USA, and Canada, driving business growth and market expansion. - Business Development: Pioneered in providing open-source support helpdesks, opening new business avenues in the tech support domain. Key Achievements: - Organizational Growth: Expanded the team to over 40 professionals across three offices in France, Canada, and the USA. - Strategic Partnerships: Secured the technical support contract for Mandrakesoft, showcasing trust and reliability in our services. - Innovation in Technology: Developed a Linux distribution based on Debian, contributing to the diversification and advancement of open-source software. - Industry Impact: Paved the way for open-source adoption in the tech support industry. Notable References: - Successfully served over 29,000 customers for Mandrakesoft. - Provided services to high-profile clients like France Telecom, Red Hat France, and MacMillan.