Andrea Toponi

Cyberangels

• Founded Cyberangels to empower startups and SMBs in managing cyber risks effectively.  
• Developed an AI-based automated engine for non-intrusive risk assessments, enhancing cybersecurity without compromising data.  
• Implemented a gamification maturity framework, resulting in improved compliance and reduced data breach risks.  
• Achieved significant client satisfaction, evidenced by case studies showcasing successful outcomes for various businesses.

CEO & Founder

Startupbootcamp Italy

Startup Mentor

Digix srl

Founding Board Member (Exited 🚀)

CEO & Co-founder

Apta Solutions (Tricise Group)

Investor & Board Member (Exited 🚀)

Allinance srl

(Merged with Digix in 2020) 

Allinance has been the first Italian Microsoft PPM Gold Partner.

Allinance has worked side by side with customers introducing Project Portfolio Management (PPM) solutions based on the right technology that best fits with customer's expectations.  

By providing qualified professional services, creating custom solutions and vertical add-on, we have facilitated Project Management, PMO and Executive in the fast adoption of PPM tools. 

In the last years Allinance has become one of the main actors in the implementation of PPM platform in Italy, Switzerland and Spain.

CEO & Co-founder (Acquired ❤️)

Allinance Iberia

Has been such a valuable experience! Starting new markets abroad is never easy. The pandemic definitely shut this business down. But it has been a great journey!

Managing Partner (Failed😑)

Action Network

Partner

Skylab Italia

Responsible in cost and revenue in the start-up consulting Business Unit. Main responsibilities:
- Business Unit's strategic planning  
- Business model definition 
- Product and Services portfolio definition and management
- Business development
- Sales management
Facts:
- financial management
- business development, 
- program management,
- resource management,
- accounting
- market scouting
- partner network development

Partnership achieved: Microsoft, CA, ProjectObjects, Bip.

Customers: Edison, Eni e&p, Fiat Group, Chrysler Group, Saipem, Techint, Bennet, Ferrari Gestione Sportiva, Intesa San Paolo, Mediobanca, Politecnico di Milano, ...

Head of Project Management Solutions business unit

Kelyan Project.Net

- Project Manager and Senior Consultant in Microsoft EPM Solution (Project Server since 2003, Project Portfolio Server).
- Managment of customer sponsors and project stakeholders to gain the right commitment to projects. 
- Analysis and design of EPM / PPM process models and tools

Main managed projects:
- Generali SI
- Intesa San Paolo MOI
- Seat Pagine Gialle DITP
- Italtel MP&S
- Agusta Westland Risk Management
- Mose Risk Management

Senior Risk Management Consultant | Senior PPM Consultant

Risk Management officer
PMO assistant for Nigeria/Egypt projects area

CEO & Founder @ Cyberangels | Cybersecurity, Compliance and AI

"Thousands, millions of individuals work, produce, and save despite everything we (politics) can do to hassle them, obstruct them, and discourage them.
It is a pure mission, a clear vision that drives them, not just the thirst for money. The taste and pride in seeing their own company thrive, gain credibility, inspire trust in an ever-expanding clientele, expand facilities, and beautify premises are just as powerful motivators for progress as profit.
If this were not the case, it would be hard to explain why there are entrepreneurs who devote all their energy and invest all their capital into their businesses, often for far more modest returns than they could surely and comfortably achieve in other ventures."

Who am I? 
I am a father of two children, passionate about helping people succeed with technology. I have a strong professional background built over 18 years by interacting with customers and solving their problems. 
I am a 3x-founder, the first of which I started ten years ago, generating over $50 million in revenue.

Why should people listen to me?
I have firsthand experience with the solutions I propose, and I want to share the lessons I've learned to help people save time and money while focusing on their business challenges. 
My goal is to create a better business ecosystem where providers and customers work together as true partners to achieve valuable results. 
I prioritize sharing value rather than promoting products.

What am I passionate about?
Connecting people with technology to solve problems has always been my goal since I started my career. As a company founder, I found it crucial to create a close-knit culture where employees and customers are treated as part of a unique inner circle. 
You can expect to see this approach reflected in any conversation we have.

What will I do for people?
Sharing the value and lessons I've learned is how I feel confident in marking my professional journey. 
I offer free mentorship time to everyone, so let's have a talk.

CEO & Co-Founder

😫 You know how devastating it can be for a company of any size to suffer a cyber attack? Crazy expensive especially for startups and SMBs. 

😒 As a founder and CEO who has experienced a cyber attack firsthand, I know well. That's why I'm committed to sharing my knowledge with fellow entrepreneurs and business leaders.

😡 And if you were told to buy this super techy tool or the other one, you're just wasting time, money, and making your brand look bad. You need a better way.

✔️ It's time for you to prioritize cybersecurity in your organizations, to empower your teams to effectively manage cyber risks without feeling overwhelmed.

🎉 That's where Cyberangels comes in! We've cracked the code with a method that works all year round, allowing you to reduce the risk of data breaches and compliance fines with an AI-based automated engine and the award-winning gamification maturity framework. 

🎯 Our Solution:

We perform automated external non-intrusive risk assessments, so you are not requested to share access to your data and infrastructure with us.‍

Then you get the best plan to enhance your cybersecurity and compliance, according to your maturity level, team capacity and budget constraints.

📈 Results: Don't just take our word for it. Check out our case study on how we helped our startups and SMBs

💼 My Story: As the Founder & CEO of Cyberangels, I've seen it all when it comes to startups and SMBs cyber risk and compliance. I know what works and what doesn't. That's why I'm dedicated to helping companies like yours.

🔗 Let's Connect: If you're ready to ditch the hackers and level up your enterprise security & compliance, hit me up! Drop me a message or connect with me here on LinkedIn. Let's make magic happen together!

Sandoz

- Responsible for defining and delivering globally the required capabilities, in line with authoritative industry best practice, to ensure minimal disruption to critical business processes in case of severe but plausible adverse events, including disruptive cyber attacks.
- Drive the definition, operationalization, and adoption across the organization of the required frameworks, methodologies, standards, processes, tools, and skills for a resilient enterprise to be able to continuously meet risk appetite and regulatory obligations in the pharmaceutical space.

Global Head - Cyber Resilience & Continuity

Information Systems Security Association (ISSA)

Global lead of the Cyber Resilience SIG founded in 2021, focused on gathering subject matter experts within ISSA members around NIST 800-160 guidelines and more. In charge of setting up the global charter and framework for the SIG to be productive and successful. 
As well, Director for International Projects at ISSA Poland from 2018 - responsible for cooperation with international parties on Information Security projects, specialized in educational and recruitment matters in Poland.

Chairman - Cyber Resilience SIG (Special Interest Group)

High Value Target

Mastermind of the trademarked High Value Target methodology which is rapidly becoming the trusted reference for critical asset identification to increase the cyber resilience posture of organizations. 
www.highvaluetarget.org

Founder & Chief Researcher

Cyber Resilience Academy

The Cyber Resilience Academy offers live, hands-on training to equip you with the skills to design and ensure cyber-resilient organizations and complex systems-of-systems. 
Our courses teach you how to effectively leverage authoritative frameworks that can be easily implemented in any organization. With class sizes typically capped at 10 participants, we ensure personalized attention and high-quality learning experiences for each attendee.

Founder & Lead Instructor

Standard Chartered Bank

- Leading the Second Line of Defense Cybersecurity Risk team, responsible for identifying and designing the required elements for the Bank to move towards industry best-in-class Cyber Resilience, Operational Resilience and Enterprise & Security Architecture;
- Leverage and contribute to best practice frameworks in support of an evolvable Cyber Resilience risk strategy (NIST 800-160, NIST 800-172, MITRE ATT&CK, MITRE CREF, MITRE TARA, MITRE D3F3ND et al);
- Design methodologies to highlight controls and requirements that need to be prioritized and factored into the Bank's end-to-end risk governance;
- Provide challenge and oversight to multiple teams in support of sustainable and resilient services so that the Bank can protect itself against emerging extreme but plausible risks;
- Advocate for the development of a cyber resilient culture and the advancement of its practices in the wider industry.

Global Head - Cyber Resilience & Security Architecture

PepsiCo

- Responsible for the Cyber Fusion Center organization which includes Incident Response (SOC, digital forensics, malware analysis), supported by Threat Hunting, Cyber Threat Intelligence and Vulnerability Management;
- Head of global Penetration Testing, Red Team and Adversary Emulation function which assures readiness towards the attack kill-chain;
- Leading the Cyber Resilience program (NIST 800-160), focused on architecture maturity and recovery capabilities; 
- Ensuring global service delivery for the Warsaw-based Information Security team (over 50 people).

Director - Global Threat Management, Incident Response and Cyber Resilience

- Responsible for enterprise cybersecurity incident response management, ensuring that any information security threats or exposure can be contained and recovery achieved for Pepsico’s internal business partners on a global scale;
- Partner with senior IT management in a global and highly matrixed environment to ensure PepsiCo has the capability to manage information security incidents at the highest level.

Senior Manager, Global Incident Response

Hewlett Packard Enterprise

-    Responsible for all security-related business controls of largest global HP Customers, in adherence to both regulatory and contractual requirements;
- Work closely with HP’s SOC and DIS (Digital Investigation Services) to ensure quality delivery of incident response services for given Clients;
-    Provide security architecture advisory for strategic projects on global scale;
-    Ensure cloud security HP Helion design/architecture follows best practices.

Information Security Officer, EMEA Enterprise Security Services

- Leading to resolution critical outages and crisis situations in order to avoid IT services disruption to the Client, including but not limited to cybersecurity;
- Liaising with the Client IT executives and senior management when a critical issue occurs;
- Management of risk: impact mitigation, spotting trends and triggering management alerts; 
- Facilitating root cause analysis on severe incidents, reduce re-occurrence of disrupting events on long-term basis.

IT Escalation and Crisis Manager, EMEA Enterprise Services

Symantec

- Managing a technical team of IT security professionals primarily for the Symantec Antivirus and EndPoint protection product division; 
- Cooperating with sales, product management, other technical support teams (USA, Latin America and Asia) to deliver high quality support to Clients;
- Dealing with Customer escalations on global scale, ensuring that their needs are met in timely fashion and the service is compliant with SLAs;
- Identify & recruit top talent within EMEA, assuring the local team grows.

Supervisor and Duty Manager, EMEA Enterprise Technical Support

Cegedim

- Setting up a near-shore capability for database operations, recruit and manage a team of 20+ analysts for a medical database and call center environment.

Team Leader, Database Operations

Award winning professional on a mission to provide tangible value by leveraging -and contributing to- recognized best practices worldwide (such as NIST, MITRE, World Economic Forum, OASIS, FIRST). 
Key specialties include cyber resilience, incident response, infrastructure protection & monitoring, threat & adversary emulation, enterprise security architecture, crisis management and the ability to manage technology risk in highly-complex multinationals. 
Regular exposure to key corporate stakeholders up to C-level executives, aspiring Chief Information Security Officer (CISO). Up-beat, flexible to change and able to take quick decision, leveraging DevSecOps, Agile and Lean Six Sigma concepts.

Main certifications include:
SABSA, TOGAF, GCED, ISO22301, ISO27000, EnCase, CISM, CGEIT, CEH, CCSK, MoR, ITIL, Lean 6Sigma.

Research work:
highvaluetarget.org
cyberresiliencemanifesto.org
cyberresilienceacademy.com

Co-author:
World Economic Forum Cyber Resilience Index

Collaborations:
MITRE, NIST, ENISA, OASIS

---
Press note

Francesco Chiarini is the founder and Chair of the ISSA.org Cyber Resilience Special Interest Group with nearly 2500 associates across the globe, and the creator of the Cyber Resilience Awareness Day worldwide. He leads globally cyber resilience for a leader in the pharma industry, with the aim to assess and evolve its cyber resilience posture by highlighting the key capabilities needed to sustainably stay ahead of the cyber threat. 
Francesco has 20 years’ experience in IT and cyber security and joined Standard Chartered Bank from PepsiCo where he was in charge of one of the two global Cyber Fusion Centers (Poland), leading globally incident response, red teaming, adversary emulation and cyber resilience. 
From 2019 when NIST released the 800-160 publication, Francesco specialized in equipping companies with the ability to withstand and recover from multi-faceted attacks from advanced adversaries. He had the privilege to build a best-in-class cyber resilience program vetted -among others- by experts of the US CISA cyber resilience task force. In this capacity, Francesco has coined the concept of “high value target” to identify key assets from an adversarial standpoint.
Francesco has hired hundreds of information security professionals in Poland and won the 2021 Volunteer of the Year award at ISSA.org, won the global innovation award from the US Consumer Brands Association in 2018 among Fortune-100 companies, and founded the Consumer Packaged Goods (CPG) Special Interest Group at FIRST.org group.

Francesco 🚨 Chiarini

Francesco Chiarini

Designing resilience to outplay adversity, one blueprint at a time. Cyber resilience leader · Defending & innovating for top brands · Trusted advisor to CISO, CxO | SABSA TOGAF CISM CGEIT ISO27k ISO22k CCRO

Partner & CISO | Global Cyber Resilience Leader | Human-Centred Leadership | Protecting Trust, People and Performance

I’m really tired of this debate about cyber being a “cost centre”.
Every now and then the same argument comes back.
And maybe it never really went away.
Cyber is a cost centre.
CISOs don’t generate revenue.

It’s shallow. It’s outdated. And it completely misses the point.

A CISO may not bring money in.
But a CISO absolutely protects it.

Look at the last 18 months.
JLR. M&S. Co-op. F5. British Library.
One breach and everything stops.
Revenue stalls. Operations freeze. Customers lose trust.
Entire leadership teams get pulled off their priorities for weeks.

Without strong cyber capability, organisations don’t just take a hit.
They stop functioning.
It does not impact just systems.
It impacts people. 

Cyber isn’t a cost centre.
It’s a continuity centre.
It’s a resilience centre. 
It keeps the business running so everyone else can focus on growth.

Cyber function protects:
Revenue
Reputation
Brand
Operations
Customer confidence
Regulatory trust
The licence to operate

Because when those foundations fail, everyone suddenly remembers how expensive insecurity really is.

The CISO may not drive revenue.
But without a credible one, the business can lose it faster than it’s made.

Cyber protects the business.
So the business can protect the bottom line.

#TheCISOMind #CyberResilience #Trust

The recent European airports ransomware attack is the wake-up call no one wanted.

In September, several major European airports were hit by a coordinated ransomware attack that targeted airport operations systems at Collins Aerospace (via its “MUSE” check-in and boarding software). 

Flights were delayed.
Cancellations occurred.
Passengers were inconvenienced.

As your business is heavily dependent on digital infrastructure and hidden critical assets, you should pay attention.

Your service and software providers all rely on systems that feel invisible until they break.
They may be referred to as undervalued assets or high-value targets for adversaries.

The attack exposed three weak points every company has:
1) Over-reliance and over-trust on critical vendors.
2) Poor visibility into system dependencies.
3) No offline or air-gapped continuity plan.

When a threat actor hits one system, every connected system takes the damage too.

What your service and software providers should do this month.

Three actions worth taking:
a) Print out your cyber crisis response plan.
b) Identify every external vendor that touches critical data.
c) Create a single-page offline workflow for business continuity.

If airports can get compromised, so can the rest of us.
Most founders spend years building their business. They lose it in minutes because they assume their systems are safe.

This attack wasn’t about airports.
It was a global memo:

Prepare before someone forces you to.
Your attention is your greatest asset, thanks for sharing it with me.

High Value Target
Cyber Resilience Academy
CR-CMM (Cyber Resilience Capability Maturity Model)
CR-CMM (Cyber Resilience Capability Maturity Model)
ISSA Cyber Resilience Special Interest Group
Information Systems Security Association (ISSA)

taplio

The Battle

Andrea Toponi

Francesco 🚨 Chiarini

Followers

Posts

Engagements

Likes

Performance ScoreFrancesco 🚨 Chiarini's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Andrea Toponi

Francesco 🚨 Chiarini

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Francesco 🚨 Chiarini's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreFrancesco 🚨 Chiarini's LinkedIn Performance