GDPR AUDIT SECURITY

The consultant will be expected to work independently to provide the following documentation and analyses upon completion of the assignment:
Deliverable 1: 

• Infrastructure & Network Analysis and Diagram
• Complete mapping of physical and logical interconnections (Network, VPN, CFWB/ETNIC Network, public terminals).
• Precise identification of compartmentalization flaws.

Deliverable 2: 

• Security analysis and functional diagram
• Modeling of data flow security and access management.
• Objective assessment of the level of exposure of application data .
• Analysis of logging and associated monitoring policies .

Deliverable 3: 

• Action and Remediation Plan
• Drafting a prioritized technical roadmap enabling to implement a Remediation Plan.

Conflicts of interest

=============
The concept of conflict of interest refers to any situation in which, at the time of the award or performance, any person linked to a contracting authority in any way, as well as any person likely to influence the award or the outcome thereof, has directly or indirectly a financial, economic or other personal interest which could be perceived as compromising their impartiality or independence in the context of the award or performance.

The existence of a conflict of interest is in any case presumed:
1° as soon as there is a relationship or alliance, in the direct line up to the third degree and, in the collateral line, up to the fourth degree, or in the case of legal cohabitation, between the natural person, and one of the candidates or tenderers or any other natural person who exercises on behalf of one of them a power of representation, decision or control;

(2) the natural person is, himself or through an intermediary, the owner, co-owner or active partner of one of the applicant or tendering undertakings or exercises, in law or in fact, himself or, as the case may be, through an intermediary, a power of representation, decision or control.
A conflict of interest is considered to be any situation in which a natural person who has worked for a contracting authority as an internal collaborator, whether or not in a hierarchical relationship, as a relevant civil servant, public officer or any other person linked to a contracting authority in any way, subsequently intervenes in the context of a public contract/call for projects awarded by that contracting authority and that a link exists between the previous activities that the above-mentioned person has performed for the contracting authority and its activities in the context of the contract/call for projects. However, the application of the provision is limited to a period of two years following the resignation of the said person or any other means of terminating the previous activities.

This provision gives the contracting authority, duly informed by the service provider, after verification of the situation, the possibility of terminating the contract/project entrusted to the service provider without compensation. During these checks, the information and justifications collected from the person concerned will be taken into account. In the event of termination, a statement of the services performed will be drawn up for payment to the service provider. In the event of an infringement (e.g. if the service provider does not disclose the conflict situation), the finding by the contracting authority may result in the nullity of the contract/project. If no justification is provided at the request of the contracting authority, the service provider will not be entitled to any payment for the services performed after the time when it should have known of the incompatibility. The contracting authority may, for the purposes of the contract/project, freely dispose of the studies, reports, etc., drawn up by the service provider in execution of the contract/project. It may also exclude it from its contracts/calls for projects for a fixed period.

Skills

• Audit Expertise
• Business Process Management
• Business Process Modelling Notation (BPMN)
• Business Process Re-engineering
• Knowledge of BCSS / eHealth
• Enterprise Architecture Expertise
• Document Engineering
• IT Investigator
• Large Organisation Experience
• Public Sector Experience
• Networking

Languages
French - Level Native