EuroCTP

Chief Information Security Officer

Bare Consulting

Cybersecurity strategic advisor for small organizations. Delivering high-impact, tailor-made cybersecurity consultancy projects and innovative solutions for the SMB market. Currently in Fintech.

Current Projects:
Fractional CISO, EuroCTP

Past Projects:
Threat Modeling Workshops, CarOnSale

Founder & CTO

Belio.co | Securing Peace of Mind

Co-Founder

CerQlar

Interim CISO (on assignment from Xebia Security)
Successfully solving the startup’s security challenges and achieving SOC 2 compliance.


Outstanding achievements:
Established organization’s first security program.
Readied organization for SOC 2 audit in five months and obtained an (immaculate) SOC 2 Type 2 in eight months.

Keywords: SOC2, governance, startup, security program, ISMS
Tools: Drata, Notion, Monday (PM)

ABN AMRO Bank N.V.

DevOps and cloud migrations will be the dominant themes in most organizations for years to come.

Member of the CISO organization
Security wizard for DevOps teams
Threat Modeling workshops
Cloud architecture reviews

Projects:
Metromap: Re-imagining DevOps journey
Member of Threat modeling task force
Cybersecurity awareness 

Recent certifications:
Microsoft Azure Cybersecurity Expert
Microsoft Azure certified I&A specialist

Keywords: DevSecOps, Agile, cloud migrations, secure cloud architecture, threat modelling
Tools: IriusRisk (TM), Confluence

CISO DevOps Security Specialist

Ingram Micro

Do you know where your security gaps are? Could outsourcing all or part of your security assessments be a good fit for your organization?  If so, how can we help?

Member of the EMEA Center of Excellence - a professional services team used by our partners to deliver services for their customers.
Deliver security posture assessments in on-premise and hybrid cloud (Azure) environments.
Act as Trellix (formerly McAfee Enterprise) EMEA ambassador for internal teams and partners.
Provide research and thought leadership on a variety of topics; i.e., cloud security, threat protection/detection, TI, CASB, DLP, SOAR, SASE, xDR.

Outstanding achievements:
Microsoft certified Azure solution architect & security expert
Winner of 2021 McAfee Distributor's sales engineer of the year Award
First (worldwide) to complete the full McAfee M-HERO presales certification path (6 certs)

Keywords: security assessments, cloud security, Azure, professional services
Tools: QS CSAT, Azure

Senior Information Technology Security Consultant

Trend Micro

When the expectation is that all businesses will be breached at some point, the winning strategy is creating an environment where these breaches can be detected.

Tailor and deliver advanced workshops on our network security detection technologies to customers as part of the EMEA Professional Service team.

Achievements:
• Trend Micro certified master in key technologies
• Certified Online Training Professional (COTP)

Keywords: Network security, Deep Discovery, XDR, Virtual training

Technical Training Consultant

Palo Alto Networks

“Zero trust” should be the new normal. 

Manage the channel technical training and certification program in EMEA for networks, cloud, and endpoint security solutions, traveling extensively to our key partners to deliver impactful live training sessions, supported by virtual deliveries, depending on needs.

Outstanding achievements:
• Successfully piloted an online (virtual) certification program for EMEA channel partners, which resulted in an increased number of sessions per quarter (+60%), whilst increasing customer satisfaction (+10%)
• Certified PSE-Platform Professional and PCNSE.

Keywords: network security, system security, training and facilitating, channel enablement, cloud security (AWS, Azure, GCP), PCNSE

Technical Training Manager

McAfee

I deliver and facilitate training classes on cybersecurity and sales technique topics, writing literature and materials to be used in training programs, and designing exercises to enhance the overall experience.

Apply acquired knowledge of adult training theories to training opportunities

Keywords: training, facilitating, presenting, information security, onboarding, Solution Selling

Technical Sales Consultant

I seek to understand our partners’ needs and assess how we can provide this making it the best experience for them.

Organize and deliver a technical training program for SEUR channel partners
Assist resellers with installing and configuring McAfee technologies in their technical labs
Co-delivery of POC with partner’s presale resource on key accounts
Assist value-added distributors as a technical go-to resource for their partners

Personal successes:
Contributed to the accreditation of 100+ channel presales engineers across 9 key technologies, establishing and enhancing our relationship with key channel partners and distributors in the SEUR region.

Keywords: training and presenting, strategy, channel, pre-sales, channel technical enablement, information security, McAfee

Channel Development Specialist

I provide technical guidance to internal sales teams.

Assist EMEA Inside Sales team as a technical resource for their customers and prospects
Prepare and deliver technical presentations explaining products or services to customers and prospective customers
Confer with customers and engineers to assess equipment needs and to determine system requirements
Deliver formal and ad-hoc training sessions for new hires and as part of the team’s development.

Keywords: pre-sales,  information security, training, demo, presenting.

Technical Presales Engineer

Symantec

Project management for EMEA Order fulfilling department and team leadership in the midst of change. PMI certified, Six Sigma (Lean) Green Belt.

Information Technology Project Manager

Support Engineer, and team leader of a Tier 2 support team that provided the liaison between L1 and engineering.
Member of a security response 24x7 global team for key customers.
Deliver formal training to new hires.

Principal Technical Support Engineer / Team Lead

From coding software to supporting customers to leading cybersecurity teams, I've championed digital safety for over 20 years. My experience, certifications (CISSP, CCSP), and a deep understanding of technology and compliance standards make me the trusted advisor for startups and SMEs. Now, leading my own consulting firm, I innovate security solutions to make protection simple and affordable.  Let's make your business cyber-strong.

We've mapped the CIS Critical Security Controls v8 to the National Institute of Standards and Technology (NIST) Cybersecurity Framework 2.0. Using this mapping, you can better understand your cybersecurity posture, evaluate the extent to which you've incorporated cyber risk management throughout your organization, and defend against emerging cyber threats. #CISControls #cybersecurity 

Paolo Carner, MSc 

As an Information Technology Security Consultant, I help businesses improve their cybersecurity posture with targeted, pragmatic, and effective solutions. I have over 20 years of experience in the IT security field, spanning various roles and industries, from software development to CISO positions.

My expertise lies at the intersection of technology and business, where I leverage my certifications (CISSP, CCSP) and skills (cybersecurity, SOC 2, vCISO) to create secure and compliant environments for startups. I'm also a co-founder of a cybersecurity startup, where I lead the innovation of managed security and compliance services. My mission is to democratize cybersecurity and empower organizations to be more resilient and confident.

cisecurity.org • 1 min read

CIS Controls v8 Mapping to NIST CSF 2.0

Hi everyone - I am still looking for a new contract role and would appreciate your support. 

Thank you in advance for any connections, advice, or opportunities you can offer. #OpenToWork

CVSS = 10. There seems to be a patch available ..

thehackernews.com • 2 min read

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

🤦‍♂️🤦‍♂️🤦‍♂️🤦‍♂️

krebsonsecurity.com • 3 min read

Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

Latest on #cybersecurity

TeamCity supply chain bugs receive massive exploitation     https://lnkd.in/ecbq7zG7

Protecting cloud workloads is tough. Even for Microsoft.

Azure-hosted server storing sensitive data linked to Microsoft’s Bing search engine was left open with no password protection, meaning it could be accessed by anyone online.

Compliance and risk models in cyber insurance

Insurers take into account a company’s compliance with cybersecurity best practices and standards when determining coverage and premiums. But this compliance is not just about meeting minimum standards; it also involves genuinely enhancing the organization’s cybersecurity posture and being able to demonstrate it.

securityboulevard.com • 48 min read

Cyber Insurance: Sexy? No. Important? Critically yes.

Ransomware: It's Not Just About Your Files, It's About Your Well-Being

Ransomware isn't just a tech headache - it's a major mental health threat. A recent study by the Royal United Services Institute (RUSI) found these attacks leave victims feeling stressed, anxious, and even angry. The fear and uncertainty can linger for weeks, impacting your sleep, work, and overall well-being.

Beyond the Tech, the Toll on You

Imagine this: you wake up to a ransom note holding your digital life hostage. Scary, right? The RUSI report shows this fear can translate into:

Anxiety and Panic: The pressure to regain control and the uncertainty of the situation can trigger intense anxiety and panic attacks.
Anger and Frustration: Feeling helpless and violated by cybercriminals can lead to anger and frustration.
Long-Term Stress: The mental strain from a ransomware attack can linger for weeks or months, impacting your daily life.
Protecting Yourself From More Than Ransom

The good news? You can fight back against ransomware and safeguard your mental health:

Be Cyber Savvy: Learn basic cybersecurity practices like strong passwords and safe browsing to minimize risk.
Backup Regularly: Regularly back up your data on a separate device, so you have a safety net if attacked.
Have a Plan: Know what steps to take if you encounter ransomware to minimize stress and panic.

For in-depth info on the psychological impact of ransomware, check out the RUSI report (it's worth a read!): RUSI Ransomware Harms Paper: link to the paper.

By taking action, you can make yourself a tougher target and protect your peace of mind. Stay safe out there!

static.rusi.org • 132 min read

static.rusi.org

Weekend parting thought: is time travel possible?

Since my early childhood, as early as i can remember, I’ve always been fascinated about time travelling. It you want to get an easy read about the latest theories, dig into this article from the BBC. And enjoy the weekend!

bbc.com • 1 min read

Is time travel really possible? Here’s what physics says

Dear business owner: should you be worried about ransomware?

See what the UK NCSC will have to say about it.

And, once you are done, check how your defence would score against this here: https://lnkd.in/eBCxbDeu


https://lnkd.in/ewtfUWUr

marketing-bare-qenixaxf.scoreapp.com

The Ransomware Readiness Score

XZ Utils compromise: the lesson to learn and how to help open source.


https://lnkd.in/ezCiWhbk

Check this out on LinkedIn Learning! I have made it free for you with the link below. #itsecuritypoliciesprocedures #cybersecurity

The secondary effect of a ransomware attack always lurks in the shadow. Ransomware paid or not.

Taplio

Paolo Carner, MSc 's Linkedin Analytics

Paolo Carner, MSc

What is Paolo talking about?

Paolo Carner, MSc 's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Paolo Carner, MSc 's Linkedin Analytics

Paolo Carner, MSc

What is Paolo talking about?

Paolo Carner, MSc 's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Paolo Carner, MSc 's Linkedin Analytics

Paolo Carner, MSc 's Best Posts (last 30 days)