Andrea Toponi

Cyberangels

• Founded Cyberangels to empower startups and SMBs in managing cyber risks effectively.  
• Developed an AI-based automated engine for non-intrusive risk assessments, enhancing cybersecurity without compromising data.  
• Implemented a gamification maturity framework, resulting in improved compliance and reduced data breach risks.  
• Achieved significant client satisfaction, evidenced by case studies showcasing successful outcomes for various businesses.

CEO & Founder

Startupbootcamp Italy

Startup Mentor

Digix srl

Founding Board Member (Exited 🚀)

CEO & Co-founder

Apta Solutions (Tricise Group)

Investor & Board Member (Exited 🚀)

Allinance srl

(Merged with Digix in 2020) 

Allinance has been the first Italian Microsoft PPM Gold Partner.

Allinance has worked side by side with customers introducing Project Portfolio Management (PPM) solutions based on the right technology that best fits with customer's expectations.  

By providing qualified professional services, creating custom solutions and vertical add-on, we have facilitated Project Management, PMO and Executive in the fast adoption of PPM tools. 

In the last years Allinance has become one of the main actors in the implementation of PPM platform in Italy, Switzerland and Spain.

CEO & Co-founder (Acquired ❤️)

Allinance Iberia

Has been such a valuable experience! Starting new markets abroad is never easy. The pandemic definitely shut this business down. But it has been a great journey!

Managing Partner (Failed😑)

Action Network

Partner

Skylab Italia

Responsible in cost and revenue in the start-up consulting Business Unit. Main responsibilities:
- Business Unit's strategic planning  
- Business model definition 
- Product and Services portfolio definition and management
- Business development
- Sales management
Facts:
- financial management
- business development, 
- program management,
- resource management,
- accounting
- market scouting
- partner network development

Partnership achieved: Microsoft, CA, ProjectObjects, Bip.

Customers: Edison, Eni e&p, Fiat Group, Chrysler Group, Saipem, Techint, Bennet, Ferrari Gestione Sportiva, Intesa San Paolo, Mediobanca, Politecnico di Milano, ...

Head of Project Management Solutions business unit

Kelyan Project.Net

- Project Manager and Senior Consultant in Microsoft EPM Solution (Project Server since 2003, Project Portfolio Server).
- Managment of customer sponsors and project stakeholders to gain the right commitment to projects. 
- Analysis and design of EPM / PPM process models and tools

Main managed projects:
- Generali SI
- Intesa San Paolo MOI
- Seat Pagine Gialle DITP
- Italtel MP&S
- Agusta Westland Risk Management
- Mose Risk Management

Senior Risk Management Consultant | Senior PPM Consultant

Risk Management officer
PMO assistant for Nigeria/Egypt projects area

CEO & Founder @ Cyberangels | Cybersecurity, Compliance and AI

"Thousands, millions of individuals work, produce, and save despite everything we (politics) can do to hassle them, obstruct them, and discourage them.
It is a pure mission, a clear vision that drives them, not just the thirst for money. The taste and pride in seeing their own company thrive, gain credibility, inspire trust in an ever-expanding clientele, expand facilities, and beautify premises are just as powerful motivators for progress as profit.
If this were not the case, it would be hard to explain why there are entrepreneurs who devote all their energy and invest all their capital into their businesses, often for far more modest returns than they could surely and comfortably achieve in other ventures."

Who am I? 
I am a father of two children, passionate about helping people succeed with technology. I have a strong professional background built over 18 years by interacting with customers and solving their problems. 
I am a 3x-founder, the first of which I started ten years ago, generating over $50 million in revenue.

Why should people listen to me?
I have firsthand experience with the solutions I propose, and I want to share the lessons I've learned to help people save time and money while focusing on their business challenges. 
My goal is to create a better business ecosystem where providers and customers work together as true partners to achieve valuable results. 
I prioritize sharing value rather than promoting products.

What am I passionate about?
Connecting people with technology to solve problems has always been my goal since I started my career. As a company founder, I found it crucial to create a close-knit culture where employees and customers are treated as part of a unique inner circle. 
You can expect to see this approach reflected in any conversation we have.

What will I do for people?
Sharing the value and lessons I've learned is how I feel confident in marking my professional journey. 
I offer free mentorship time to everyone, so let's have a talk.

CEO & Co-Founder

😫 You know how devastating it can be for a company of any size to suffer a cyber attack? Crazy expensive especially for startups and SMBs. 

😒 As a founder and CEO who has experienced a cyber attack firsthand, I know well. That's why I'm committed to sharing my knowledge with fellow entrepreneurs and business leaders.

😡 And if you were told to buy this super techy tool or the other one, you're just wasting time, money, and making your brand look bad. You need a better way.

✔️ It's time for you to prioritize cybersecurity in your organizations, to empower your teams to effectively manage cyber risks without feeling overwhelmed.

🎉 That's where Cyberangels comes in! We've cracked the code with a method that works all year round, allowing you to reduce the risk of data breaches and compliance fines with an AI-based automated engine and the award-winning gamification maturity framework. 

🎯 Our Solution:

We perform automated external non-intrusive risk assessments, so you are not requested to share access to your data and infrastructure with us.‍

Then you get the best plan to enhance your cybersecurity and compliance, according to your maturity level, team capacity and budget constraints.

📈 Results: Don't just take our word for it. Check out our case study on how we helped our startups and SMBs

💼 My Story: As the Founder & CEO of Cyberangels, I've seen it all when it comes to startups and SMBs cyber risk and compliance. I know what works and what doesn't. That's why I'm dedicated to helping companies like yours.

🔗 Let's Connect: If you're ready to ditch the hackers and level up your enterprise security & compliance, hit me up! Drop me a message or connect with me here on LinkedIn. Let's make magic happen together!

Sandoz

- Responsible for defining and delivering globally the required capabilities, in line with authoritative industry best practice, to ensure minimal disruption to critical business processes in case of severe but plausible adverse events, including disruptive cyber attacks.
- Drive the definition, operationalization, and adoption across the organization of the required frameworks, methodologies, standards, processes, tools, and skills for a resilient enterprise to be able to continuously meet risk appetite and regulatory obligations in the pharmaceutical space.

Global Head - Cyber Resilience & Continuity

Information Systems Security Association (ISSA)

Global lead of the Cyber Resilience SIG founded in 2021, focused on gathering subject matter experts within ISSA members around NIST 800-160 guidelines and more. In charge of setting up the global charter and framework for the SIG to be productive and successful. 
As well, Director for International Projects at ISSA Poland from 2018 - responsible for cooperation with international parties on Information Security projects, specialized in educational and recruitment matters in Poland.

Chairman - Cyber Resilience SIG (Special Interest Group)

High Value Target

Mastermind of the trademarked High Value Target methodology which is rapidly becoming the trusted reference for critical asset identification to increase the cyber resilience posture of organizations. 
www.highvaluetarget.org

Founder & Chief Researcher

Cyber Resilience Academy

The Cyber Resilience Academy offers live, hands-on training to equip you with the skills to design and ensure cyber-resilient organizations and complex systems-of-systems. 
Our courses teach you how to effectively leverage authoritative frameworks that can be easily implemented in any organization. With class sizes typically capped at 10 participants, we ensure personalized attention and high-quality learning experiences for each attendee.

Founder & Lead Instructor

Standard Chartered Bank

- Leading the Second Line of Defense Cybersecurity Risk team, responsible for identifying and designing the required elements for the Bank to move towards industry best-in-class Cyber Resilience, Operational Resilience and Enterprise & Security Architecture;
- Leverage and contribute to best practice frameworks in support of an evolvable Cyber Resilience risk strategy (NIST 800-160, NIST 800-172, MITRE ATT&CK, MITRE CREF, MITRE TARA, MITRE D3F3ND et al);
- Design methodologies to highlight controls and requirements that need to be prioritized and factored into the Bank's end-to-end risk governance;
- Provide challenge and oversight to multiple teams in support of sustainable and resilient services so that the Bank can protect itself against emerging extreme but plausible risks;
- Advocate for the development of a cyber resilient culture and the advancement of its practices in the wider industry.

Global Head - Cyber Resilience & Security Architecture

PepsiCo

- Responsible for the Cyber Fusion Center organization which includes Incident Response (SOC, digital forensics, malware analysis), supported by Threat Hunting, Cyber Threat Intelligence and Vulnerability Management;
- Head of global Penetration Testing, Red Team and Adversary Emulation function which assures readiness towards the attack kill-chain;
- Leading the Cyber Resilience program (NIST 800-160), focused on architecture maturity and recovery capabilities; 
- Ensuring global service delivery for the Warsaw-based Information Security team (over 50 people).

Director - Global Threat Management, Incident Response and Cyber Resilience

- Responsible for enterprise cybersecurity incident response management, ensuring that any information security threats or exposure can be contained and recovery achieved for Pepsico’s internal business partners on a global scale;
- Partner with senior IT management in a global and highly matrixed environment to ensure PepsiCo has the capability to manage information security incidents at the highest level.

Senior Manager, Global Incident Response

Hewlett Packard Enterprise

-    Responsible for all security-related business controls of largest global HP Customers, in adherence to both regulatory and contractual requirements;
- Work closely with HP’s SOC and DIS (Digital Investigation Services) to ensure quality delivery of incident response services for given Clients;
-    Provide security architecture advisory for strategic projects on global scale;
-    Ensure cloud security HP Helion design/architecture follows best practices.

Information Security Officer, EMEA Enterprise Security Services

- Leading to resolution critical outages and crisis situations in order to avoid IT services disruption to the Client, including but not limited to cybersecurity;
- Liaising with the Client IT executives and senior management when a critical issue occurs;
- Management of risk: impact mitigation, spotting trends and triggering management alerts; 
- Facilitating root cause analysis on severe incidents, reduce re-occurrence of disrupting events on long-term basis.

IT Escalation and Crisis Manager, EMEA Enterprise Services

Symantec

- Managing a technical team of IT security professionals primarily for the Symantec Antivirus and EndPoint protection product division; 
- Cooperating with sales, product management, other technical support teams (USA, Latin America and Asia) to deliver high quality support to Clients;
- Dealing with Customer escalations on global scale, ensuring that their needs are met in timely fashion and the service is compliant with SLAs;
- Identify & recruit top talent within EMEA, assuring the local team grows.

Supervisor and Duty Manager, EMEA Enterprise Technical Support

Cegedim

- Setting up a near-shore capability for database operations, recruit and manage a team of 20+ analysts for a medical database and call center environment.

Team Leader, Database Operations

Award winning professional on a mission to provide tangible value by leveraging -and contributing to- recognized best practices worldwide (such as NIST, MITRE, World Economic Forum, OASIS, FIRST). 
Key specialties include cyber resilience, incident response, infrastructure protection & monitoring, threat & adversary emulation, enterprise security architecture, crisis management and the ability to manage technology risk in highly-complex multinationals. 
Regular exposure to key corporate stakeholders up to C-level executives, aspiring Chief Information Security Officer (CISO). Up-beat, flexible to change and able to take quick decision, leveraging DevSecOps, Agile and Lean Six Sigma concepts.

Main certifications include:
SABSA, TOGAF, GCED, ISO22301, ISO27000, EnCase, CISM, CGEIT, CEH, CCSK, MoR, ITIL, Lean 6Sigma.

Research work:
highvaluetarget.org
cyberresiliencemanifesto.org
cyberresilienceacademy.com

Co-author:
World Economic Forum Cyber Resilience Index

Collaborations:
MITRE, NIST, ENISA, OASIS

---
Press note

Francesco Chiarini is the founder and Chair of the ISSA.org Cyber Resilience Special Interest Group with nearly 2500 associates across the globe, and the creator of the Cyber Resilience Awareness Day worldwide. He leads globally cyber resilience for a leader in the pharma industry, with the aim to assess and evolve its cyber resilience posture by highlighting the key capabilities needed to sustainably stay ahead of the cyber threat. 
Francesco has 20 years’ experience in IT and cyber security and joined Standard Chartered Bank from PepsiCo where he was in charge of one of the two global Cyber Fusion Centers (Poland), leading globally incident response, red teaming, adversary emulation and cyber resilience. 
From 2019 when NIST released the 800-160 publication, Francesco specialized in equipping companies with the ability to withstand and recover from multi-faceted attacks from advanced adversaries. He had the privilege to build a best-in-class cyber resilience program vetted -among others- by experts of the US CISA cyber resilience task force. In this capacity, Francesco has coined the concept of “high value target” to identify key assets from an adversarial standpoint.
Francesco has hired hundreds of information security professionals in Poland and won the 2021 Volunteer of the Year award at ISSA.org, won the global innovation award from the US Consumer Brands Association in 2018 among Fortune-100 companies, and founded the Consumer Packaged Goods (CPG) Special Interest Group at FIRST.org group.

taplio

The Battle

Andrea Toponi

Francesco 🚨 Chiarini

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?