Tristan Roth

ISMS Copilot

Building the best AI assistants to help security management professionals (implementor, auditors) navigating ISO 27001, ISO 42001. 

We empower consultants. Replacing people is not something that gets you up in the morning.

Founder

Better ISMS

Better ISMS mission is to reconcile Information Security Management and AI.

On the one hand, exploring AI use for ISO 27001-related tasks.

On the other hand, educating on AI confidentiality and privacy risks.

Current products aligned with our mission:

ISMS Copilot: https://ismscopilot.com/

Use AI Securely: https://useaisecurely.com/

See more: betterisms.co

Kantox

Developing and implementing the risk management framework of the company. Getting the organization successfully ISO 27001 certified.

Coordination of full lifecycle of ISMS documentation.
Overview of the ISMS implementation.
Planning and facilitation of required auditing efforts.
Supervise supplier alignment with security requirements.
Supervise extraction and analysis of security KPI.

Risk Management Specialist and ISMS Manager

eXalt

Goals of the mission for BNP PARIBAS PERSONAL FINANCE : realize risk cartography, deploy risk management tools; increase performance    of KRI/KPI collection, consolidation, reporting and monitoring within an IT Risk department.

Missions :
-	Risk Cartography: Mapping the entity's IT risks, defining action plans and making sure they are implemented. 
-	IT Risk Assessment: Creating and supervising audit services related to IT risk assessment   of suppliers. We created different assessments depending on the contracting stage (pre-contract or contract renewal) with the supplier. The services are now performed 50 times/year in Spain by cyber engineers  that I trained and supervised. 
-	IT Risk Project Management : Steering the deployment of the ServiceNow tool for risk management of the entity and its international branches. Coordinating the deployment of a dozen risk  management modules to be used by all entities' subsidiaries.
-	Key Risk/Performance Indicators : Coordinating the collection of key risk indicators (vulnerabilities, security incidents, issues caused by changes, outsourcing audits) in France and in the      bank's international subsidiaries, and organizing the reporting of alerts to top management.

IT Risk and Cyber Consultant - GRC IT at BNP Paribas PF

Ministère des solidarités et de la santé

As part of my apprenticeship at the Information Systems Office of the French Ministry of Health, my main mission was dedicated to project management, as part of the deployment of a Sharepoint solution dedicated to 1000+ end users.

Project Management Activities – Product Owner: 

-	Taking part in project governance and comitology (Kick-Off, Strategic Committee, Steering Committee) and managing Project Committees to coordinate present and future actions. 
-	Product ownership: Defining user stories and functional requirements for information-sharing platform; managing a backlog, validating sprints as part of an Agile Project, coordination with the entity in charge of the implementation of the project. 
- Product conformity: participation in the choice of solutions and their configurations (Sharepoint Online, Yammer), carrying out tests, determining future developments
-	Deployment management: change management approach (user training, communication)
-	Day-to-day management: Administration of a platform of more than 1000 users, operational maintenance of the platform, user support, collaboration of a team of developers to meet the challenges encountered and automate processes.

Project Management Metrics use: 
- Time : on-time completion percentage
- Effectiveness : Number of completed milestones
- Quality : measuring user satisfaction with Net Promoter Score.

Sharepoint Administrator - IT Project manager

Opinions are my own.

Certified Risk Manager and ISO 27001 ISMS Manager at Kantox, I am currently overseeing our ISO 27001 certification project, reinforcing our commitment to comprehensive information security. My specialization in risk management has allowed me to establish the company's enterprise risk management system, providing the necessary oversight and control in a high-risk environment.

My previous role at BNP PF's Central IT Department entailed assisting with risk mapping, key risk indicator monitoring, external supplier security audits, and departmental reporting. Additionally, I piloted the deployment of the ServiceNow tool to streamline GRC IT management. Leveraging this extensive experience, I continue to drive risk reduction and foster security-conscious cultures in my current role.

Working with ISO 27001 in September?

Get some help with the following resources:

- Guidance: iso27001security.com/
- ISO 27001 course: grclab.com
- Free templates: iso27001.zip
- AI companion: ismscopilot.com
- Framework mappings: ismsmappings.com
- Tools: ismsdirectory.com

There are plenty of great resources out there, don't start from scratch.


#ISO27001 #InformationSecurity #GRC

ISO 27001 consultant. Building tools for ISO 27001 consultants -> ISMS Copilot, ISMS Directory, ISMS Mappings.

Open article: ISO27k information security and privacy standards by share.google

ISO27k information security and privacy standards

Taplio

Tristan Roth's Linkedin Analytics

's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Tristan Roth's Linkedin Analytics

's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Tristan Roth's Linkedin Analytics

's Best Posts (last 30 days)