Confidential

System Engineering Consultant

(un)Common Sense Advisory

More than advisory/ consultancy
Supporting you understanding why, what, and how could you get compliant with GDPR [General Data Protection Regulation] and helping you getting there;
Translate GDPR requirements into plain language (either English or Romanian) and actionable advice;
Helping your organization in the efforts to obtain and maintain compliance, from risk management, data mapping, controls definitions , implementation and monitoring, to day to day operation in line with data protection;
Providing you awareness and training  materials for your staff and customers;
Support you in coordinating all these efforts, until you have a continuous process in place.
Support in relations to third parties and or authorities, if needed
Acting as an external DPO, if needed.

GDPR Implementation Consultant | External DPO - [PCEB] Certified

We help businesses bringing Common Sense back to business... with uncommon sense approaches;
We help business make "complicated" things simple... but not simpler than needed to be;
We help business owners and top management acknowledge what most employees already know ;
We help business acknowledge and face challenges, not hiding, ignoring or diminish them;
We help businesses seeing their problems or challenges with "different eyes", but in "their shoes"...

Co-Founder, unCommonSense practician

Wintech

Helping companies overcome the technical, organizational and process challenges of cybersecurity, privacy and data protection. Supporting companies to reach the level of requested compliance in an effective way, by embedding the cybersecurity and data protection practices into daily processes.  
Always with responsibility, passion and determination, for mutual benefits, respect and trust!

Managing Partner - Technology and Data Protection Consultancy

Business Transformation Group

Lead Business Consultant - project based

Teamnet

Accomplishments:
•	Refining the internal IT systems architecture;
•	Defining and implementing data governance principles, in the internal development and support functions tools, starting with unique reference data definition, implementation and usage across platforms as a basis for a new Management Information System
•	Implementing a new HR System across group companies, linked to critical IT systems and design a new reporting framework, dashboards and reports for main HR processes
•	Cleaning and implementing data governance principles, validations, reconciliations across main business directories and tools used in Teamnet group – AD, HR System, Projects Lists, Partners and Suppliers Lists, Payments approval…

Head of Business Processes and Management Reporting

Airbus Defence and Space

Accomplishments:
•	Act as Technical Manager/Chief Engineer during the last six months of SISF Romanian Border Security System implementation, run and pass the first Verification Review at system level and obtained the acceptance for SISF Project Release 1.2 (the first one with fully integrated capabilities);
•	Implemented a Project verification review process, by automating 90% of the criteria used to be done during review, introducing measurable entry and exit criteria, moving 80% of review activities to off-line individual reviews, instead of group meetings, reducing number of required iterations, the duration from months to weeks and the number of issues to me monitored from hundreds to tens of them, with 100% pass ratio after two iterations;
•	Created a team of young professionals to support several areas of the main product of Border Security Product (Requirements Engineering, PMO, Scheduling, Configuration Management and Product Safety)
•	Initiating and coordinating the creation of a Standard contract/ SOW for supplier/subcontractors in DOORS (enabling collaborative work and customizable for each domain, with auto generation of documents), to be used in large bids and reduce time and effort, from 2-3 months to 1-2 weeks;

Technical Manager - System Engineering

Accomplishments:
•	Support the technical offer definition, coordinating or supporting the requirements engineering and link with architecture and verification for several bids of Airbus Defense and Space in Border Security area, like Kazakhstan, Bulgaria, Moldova, Qatar, Algeria, Brazil…
•	Coordinate the Requirements Management and traceability to architecture and design and IVV for SISF Romania, till system acceptance;
•	Defining a Requirements Management dashboard for large projects and automate 90% of it, than an Engineering Management dashboard, which ended being used by all projects (each >250 million $)  in Border Security Business lines and by all management levels;

Requirements Manager

Freescale Semiconductor

•	Define the strategy, offer consultancy and coordinate the software development process definition and implementation across different business lines and sites in Freescale; 
•	Remotely conduct an CMMI level 3 assessment across seven sites, on three continents;
•	Support and enforce process and tools unification across business lines coexisting in the same sites and across sites, based on knowledge and experience sharing, not on formal authority;

Software Quality Assurance Coordinator for EMEA

Vodafone Romania

•	Initiator and main contributor, getting buy in, support  and finally commitments and implementation of Product life cycle / Software Development Life Cycle/ Project management methodology for Vodafone Romania;
•	Test most of IT systems in Vodafone Romania and define the first Testing process and tools configuration to support the internal software development process;
•	Design, run and coordinate Data and Traffic Reconciliation for first large Billing System upgrade (between 2 different systems, on different OS and different databases) >300 reconciliations reports designed, run,  analyzed and correcting data for billions records on hundreds business data types;
•	Defining and implementing data quality/governance for our reporting, data warehouse, than for the new BI, but also for the operational applications;
•	Defining the Revenue Assurance processes and controls, under CTO sponsorship, which made us best in class in Europe according PwC, with direct savings > one million $, with estimated losses <1%, where 2-3% being consider quite OK in the industry;
•	Leading the Sarbanes-Oxley compliance across all technical departments + >75% of the business processes… twice, and using compliance as a mean to improve the data and process efficiency and correctness; 
•	Invited Speaker, Panelist or Moderator at 10+ international Telecom conferences on Billing Systems, Revenue Management, Internal Audit and Business Risk, Business Process Management… and invited to many more.

various roles in Process Management, QA and Testing

Romanian Air Force 

•	Aside from my operational duties, I was responsible for testing and acceptance of the new Air Sovereignty Operations Center system, liaison officer in relation to USAF and unique point of contact for Lockheed Martin technical representatives  
•	After acceptance, together with USAF representatives I trained the operational staff, develop and deliver presentations for 10+ high rank military delegations (Ministry of Defense, ambassadors…) ;
•	Implement (as workarounds) two missing functionalities to the ASOC mission critical software (developed by Lockheed Martin), requested by Ministry of Defense during the conflict in Yugoslavia, using Unix scripting only – 1. draw on a maps, the trajectories of each object in the area of supervision and 2.aggregate the availability of input data sources (radars) for a period of time – both functionalities later developed by producer as core functionalities;

Technical Support Manager

Romanian Ministry of  Defence

•	Hired as a research engineer, mainly for software development, I took over in less than one year, the hardware & software design, implementation, and the project management of a Tank driving simulator, delivering in two years a homologated prototype and in another six month reaching the ready for production milestone.

Research And Development Engineer

I've done a lot of different things, in different domains in 40 years. 
Just enumerating them would seem like I'm bragging. 
However, I did them with passion and I continue to do so.


You can contact me at:
Mobile: 0723 250 333
email:   daniel.suciu@gmail.com
or through LinkedIn messaging

Anul acesta îmi serbez ziua de naștere cu o zi mai devreme, pe 16 aprilie, și vă invit pe toți să veniți la petrecerea mea.

Nu fac asta pentru a-mi lansa vreo candidatură politică :))), ci pentru ca voi să asistați la o discuție deschisă cu privire la riscurile și oportunitățile aduse de AI, securitate cibernetică, privacy, inclusiv metode de supraveghere în masă sau de manipulare a populației.

Disclaimer: NU vom fi politically correct.

Sigur nu vom acoperi toate aspectele într-un singur eveniment, dar poate fi începutul unei povești cu final fericit, în care nu dăm o putere imposibil de controlat, fie statului, fie companiilor private.

Și la acest eveniment vei fi și TU implicat, chiar dacă faci parte din public. 

Organizatorul principal al acestei serii de evenimente internaționale sunt austriecii de la Austrian Economics Center și Ayn Rand Centre Romania.

Detalii despre speakeri, moderatori și locul unde vă puteți înregistra:  https://lnkd.in/ejTdDhar

Sponsori și parteneri:  Decalex Digital, Visa, AQUA Carpatica, Domeniile Samburesti,  Pentagon Events, Universitatea Româno-Americană, Dynamic Business Connections  ,
Oveit , ThinkUP Marketing ,  FivePlus Solutions , Cyber Smart Academy , AS Group, JURIDICE.ro , Women4Cyber Romania , Academyea.Net 

Partenerul media principal: Canal 33 Romania 
——————

This year, I'm celebrating my birthday a day early, on April 16th, and I invite you all to come to my party. 

I'm not doing this to launch any political campaign :))), but rather for you to attend an open discussion about the risks and opportunities brought by AI, cybersecurity, privacy, including methods of mass surveillance or population manipulation.

Disclaimer: We will NOT be politically correct.

Surely we won't cover all aspects in a single event, but it could be the beginning of a story with a happy ending, where we don't give power that's impossible to control, either to the state or to private companies.

And at this event, YOU will also be involved, even if you're just part of the audience.

The main organisers of this series of international events are the Austrians at the Austrian Economics Center and the Ayn Rand Centre Romania.

Details about speakers, moderators, and where you can register: https://lnkd.in/ejTdDhar

Sponsors and partners: Decalex, Visa, AQUA Carpatica, Domeniile Sâmburești, Pentagon Events, Romanian-American University, Dynamic Business Connections, Oveit, Thinkup Marketing FivePlus Solutions, Cyber Smart Academy, AS Group, JURIDICE.ro, Women4Cyber Romania, Academeya.

The main media partner: Canal 33 Romania

Daniel SUCIU

Some time ago I wrote a post on where we could find the Governance in GDPR. 

But... I still believe there is no clear understanding of the Governance versus Compliance meanings, at least not one shared by all stakeholders.

Governance / Compliance definition:
Governance is the act of governing. It relates to decisions that define expectations, grant power, or verify performance. 
Compliance is either a state of being in accordance with established guidelines or specifications or the process of becoming so.
 
Corporate Governance / Compliance definition:
Corporate governance is the system of rules, practices and processes by which a company is directed and controlled. 
Corporate compliance means having internal policies and procedures designed to prevent and detect violations of applicable law, regulations, rules or standards.
 
Project Governance / Compliance definition:
Project Governance is a framework or a set  of structures, procedures, guidelines, and policies that are agreed upon by the project management team to drive project progress and measure project success[…]
Project Compliance ensures processes and procedures follow a set standard or framework.
 
In conclusion:
So, we don’t implement Compliance. 
We define & implement Governance.
Compliance is (just) the (desired) result.
 
Do you agree?
 
In my next post, I’ll try to share my opinion on the roles of different stakeholders and where DPO stands between these.

 

Some consideration on the LinkedIn algorithm based on my "creator" experience.
There are rumors the mighty LI algorithm is driven by AI. Strange AI...

I have published a post of PIGS discrimination in art, mythology, culture and it got sent to over 1500 people

I published a post, on my domain (data protection, having thousands of followers from this area) about my takeaways from the latest EDPB opinion and it was sent to 100 people

So, I have to write another post on PIGS 😁 


Yesterday I criticised the LinkedIn's analytics.
Today I feel bragging about my LinkedIn network -from a statistical perspective this time. With all the critics I still enjoy being present on this network.

I always knew I had a diverse network, but I was curious to see from which and in how many countries I have contacts (unfortunately, I didn't find a way to do this for followers). 

I was surprised to see I have contacts in at least 102 countries (I had to check them one by one, so I might miss some).

One-third are from my country, Romania, another third from another 37 countries from Europe, and one-third from 64 countries from other continents.

How I did it? Simply accepting connection requests from people who asked me to connect, as they saw something in my posts or (more probably) in my comments on other people's posts. In the last years, this was the main method (about 98-99%) for adding new contacts.

I feel really grateful for this. 
Thank you all!


Today nothing about privacy, data protection, cyber, or AI.
Today I want to discuss a serious issue, about biases, prejudices and discrimination present in our society.

For this, I would use the pig's case, which over the entire human history, was undervalued, disconsidered, and discriminated with very few exceptions. Really, I believe we should pay more attention to this example, which might reveal our not-so-good habits/ principles/values.

Pig is associated in many (most?) cultures with negative traits: laziness, greed, are seen as unclean and other undesirable traits. OK, there is one example in Hinduism where it is presented as the third incarnation of Lord Vishnu, under the name of Varaha.

Based on this is strange that Yoga, which has a lot in common with Hinduism, doesn't have any pose inspired by a pig, even if there are present many animals, both wild and domestic, birds, or even insects like locusts. We can find goats, cows... but no pigs. 

Strangely, this is the animal more closely related to humans, in terms of physiology and immunology and it was the first (not sure if it's still the only one) used for xenotransplant to humans.

Not to mention their other usage, in detecting drugs or explosives and many others, aside from pork steak and related dishes.

In many cultures, the pig is associated with many negative traits, Romanian cultures have a lot of sayings or expressions to describe negative traits having pigs as negative examples and reference terms. 


Why I think LinkedIn/s analytics are a bad joke.
I have several reasons to believe this. 

1. The ”information” it offers
     a. impressions - which is the number of people LI algorithm chooses to benefit from your post in their feed (based on unknown criteria, definitely not related to your number of connections, previous engagement with your posts, or the subjects they are interested in and following)
    b. engagement, which is the best case bullshit, as it counts the number of likes and comments on your posts in absolute numbers... including author's comments, but doesn't include votes on the polls.
So, If my post is being sent by the mighty LI algorithm to 1000 people and I got 20 engagement, and an influencer's post is being sent to 100,000 people and gets 200 votes, this is better, even if the ratio of "engaged" people is ten times higher in my case. 
   c. last, but not least, I don't know why linkedIn doesn't count people's engagement on other's people post, only the ones received for their posts. theoretically speaking, they should be interested to promote this habit, to comment on others' people posts.


Bonus: the followers' statistics: I receive information about new followers each day, however, the number of followers is NOT the numbers of followers I had + new followers... because I assume I loose followers, which make sense, but I never see this kind of information.


Apropo de discuțiile despre utilitatea/ inutilitatea AI-ului mi-au adus aminte de un banc sec și vechi:

Bulă, în autobuz, stând în picioare lângă un geam deschis. 
Un călător: Bulă, închide geamul că-i frig afară
Bulă, după ce închide geamul; No, acuma-i cald afară?

50 Shades of Governance
 
 In the last post, I tried to show (my perception on) the difference between Governance and Compliance.
 According to the definitions it's easy to understand the concept, it’s a lot more complicated to understand specific forms of governance for different domains.
 
 The fact that each domain has its own governance is also very clear, as each domain has to respect different laws, regulations, standards, frameworks or good practices. Moreover, for the same area, there could be differences from industry to industry or from country to country.
 
 What’s not clear for those without experiences in several domains is the difference in form of the governance. If for IT a procedure it’s easier to understand starting from a state-based diagram, an accountant might prefer an Excel/Word version in the form of a table with actions/responsibilities/ inputs/ outputs… and others (like Legal) might prefer it as a written document formatted by chapters and articles. For others, especially for processes embedded into tools, a story with screenshots of every action could be the most useful one.
 
 Another problem arises when there are cross-functional, transversal areas, where the rules have to be specified for different domains. Same principles/ rules, different application. One-fits-all all document is rarely useful and effective.
 Even more, integrating different governance instances into a consistent one, representative from a business perspective and derived from corporate governance is far from being an easy task.
 
 Not even assessing the compliance of different areas is so simple without understanding the specifics of each domain. Internal audit specialists might already know this.

For privacy/ data protection specialists is even worse, as they need their own governance and they need to convince the owners of other governance areas to incorporate privacy/ data protection principles into their specific governances.

Update from the European Data Protection Board (EDPB):

It has just published its opinion addressing the validity of consent to process personal data for the purposes of behavioural advertising in the context of ‘consent or pay’ models deployed by large online platforms. 


During its latest plenary, the EDPB adopted an Opinion following an Art. 64(2) GDPR request by the Dutch, Norwegian & Hamburg Data Protection Authorities (DPA). The Opinion addresses the validity of consent to process personal data for the purposes of behavioural advertising in the context of ‘consent or pay’ models deployed by large online platforms.

EDPB Chair, Anu Talus added: “Controllers should take care at all times to avoid transforming the fundamental right to data protection into a feature that individuals have to pay to enjoy. Individuals should be made fully aware of the value and the consequences of their choices.” 
In addition to this Art. 64(2) Opinion, the EDPB will also develop guidelines on ‘consent or pay’ models with a broader scope and will engage with stakeholders on these upcoming guidelines.

edpb.europa.eu • 3 min read

EDPB: ‘Consent or Pay’ models should offer real choice

Human or AI recruiter? Why ? Why not?

A question we should start to think about.
Firstly, AI is already present in several steps of the recruitment process, even if people are not aware and companies are not quite used to be transparent.
Secondly, for several reasons, it will be used by companies more and more. 

So, let's discuss the advantages and disadvantages of using an AI for all steps, until final recommendations. 

Usually, I like the devil's advocate role, but on this one, I would mention just the reasons I would prefer an AI:

- an AI is harder/less likely to be "convinced" to willingly discriminate, based on age, gender, ethnicity... when the "official process" says the opposite. It would not fear for its job,
- an AI doesn't have "bad days" because of traffic or an argument with its partner,
- after you responded to some questions you can ask it what he understood as maybe you didn't explain well. If it is not what you intended to say, you can always add more info, or clarify.  I would not try this with a human recruiter... 
- it has less concern about next meeting, the desire to take a break, go to toilet or has to respond to internal calls during the interview
- you can ask it for the results of its evaluation and the reasoning behind it, and again, you can correct it (with arguments, of course)
- no Ai would be perfect, it could be biased, but definitely less than most people,
- finally (for now) he would not judge you based on personal sympathies, your look and other subjective (and not admitted) criteria.

Please feel free to add opinions for the other side.

BTW, if you have read until here and it happens to be Romanian and work in IT you might give me some help and respond to this poll:

https://lnkd.in/dWhEjhUs

Thank you!

Reading in news:

An AI bot has passed the bar exam. What happens next?
https://lnkd.in/djukCKhW

Scientists Pitted 4-Year-Olds Against AI. The Kids Crushed the Machines at This 1 Crucial Skill
https://lnkd.in/d2Q2VFCf

As I'm an engineer, what should I understand corroborating (which seems a term highly appreciated by lawyers) these articles? 😇  


Aren't you pissed off by those who have stolen the word "Creative" for a business role that many (most) time are just regurgitating some old sayings or stupid "truth", highlighted on some pictures created by somebody else...

What about real artists, writers, architects and engineers creating new stuff, those who create rockets to explore the space, mathematicians solving problems and supporting new domains, chemists creating new materials, scientists discovering the rules of universe, pharmacists discovering new remedies for old health problems?

Bheah! These are not "creatives". 
I believe this is above bullshit. It's a megalomaniac perspective.
Am I wrong?


When pure truth is the best deception method - a personal story from the period I was a simple soldier.
 
At that times, in a military base, alcohol
was not allowed (theoretically, of course). As soldiers, at 18 years age, we
never took it seriously anyway. But, at least we tried to hide when consuming
alcohol. However, on one occasion I had an idea and make a bet with several
colleagues that I will go to the dinner, with the bottle in my hand, put it on
the table and drink. And I did exactly what I said.
 
Of course that the officer on duty, walking between the tables, saw the bottle ( a very distinct bottle, an Albanian cognac) and asked me what I have in it. Very relaxed, I responded “Cognac, of course sir. Do you want some?” He laughed, refused and wished me to enjoy it. Exactly what I did next.
 
He didn’t think for a second than somebody would be so stupid to drink in public, seen by 200 other soldiers and few officers, and to openly admit it. 😁 😇 😈 


We started to be flooded by a lot of buzzwords, on a daily basis, which is not something new. It's difficult to keep the pace with all of them.

However, some old buzzwords started to migrate to other domains (like Covid virus did... or supposed it did).

Today I've been told about a new headline for a job - Full-Stack HR

In fact it might be not so wrong. I'm curious if it sticks...

What do you day, no matter of your domain.

Maybe I should advertise myself as Full-Stack Data Protection consultant 😁 


O întrebare pentru cei din rețeaua mea ce activează în orice rol în IT:

Ați prefera să aveți de-a face cu un AI pe post de recrutor (inclusiv toate interviurile și evaluările tehnice) în locul recrutorului uman (așa cum este el perceput astăzi, pe baza experiențelor fiecăruia)?

Am limitat întrebarea la domeniul IT datorită multelor probleme semnalate de specialiștii IT, indiferent de nivel, în procesele de recrutare, chiar dacă acestea se regăsesc și în alte domenii
Un alt motiv este frecvența mai mare de interacțiuni cu Inteligența Artificială, inclusiv în dezvoltarea acestuia. 

Pentru detalii, nuanțări, observații, nu ezitați să folosiți comentariile 😀 

Mulțumesc anticipat!

Taplio

Daniel SUCIU's Linkedin Analytics

Daniel SUCIU

Daniel SUCIU's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Daniel SUCIU's Linkedin Analytics

Daniel SUCIU

Daniel SUCIU's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Daniel SUCIU's Linkedin Analytics

Daniel SUCIU's Best Posts (last 30 days)