IT RISK & RESILIENCE

Advisory

Your challenges

Private and public actors are confronted with a multitude of threats related to information technologies, while their transformations make them more vulnerable. The successive crises of the last few months, the technological evolutions and the increased exposure of Information Systems to emerging threats have reinforced the need to build a trustworthy infrastructure.

Well aware of the common challenges and the systemic nature of the risk, regulators and supervisors are strengthening the existing regulatory framework by harmonizing governance and IT risk management systems, the overall level of cybersecurity and the operational resilience of companies in all sectors.

In response to these challenges, FINEGAN Advisory supports you in your digital transformation, the control of your IT risks, and the resilience of your infrastructures and your businesses.

Our offers

IT RISK MANAGEMENT
- Governance, management and control of IT risks
- Regulatory compliance and operational implementation
- Consistency with applicable policies and standards (LPM, NIS, PCI-DSS, ISO27k, etc.)
- Organizational audit
- Assistance and transition management (CISO and IT Risk Manager)
- Analysis and mapping of IT risks

CYBERSÉCURITÉ CYBERSECURITY
- Redesign of the master plan and the ISS roadmap
- Identity and access governance
- Design and deployment of IS security processes (DLP, Supervision, Patch Management, etc.)
- Cyber crisis management exercise
- Quantification of the cyber risk
- Awareness and acculturation to Cybersecurity

DIGITAL & OPERATIONAL RESILIENCE
- Governance & Business Continuity & Recovery Strategy (BCP/ERP – PCI/PRI)
- Implementation of protection, prevention, detection, response and recovery of processes and assets
- Deployment of a complete and iterative testing framework (penetration tests, security, ISP…)
- Third party management and evaluation of outsourced services
- Mastery of public cloud integration and multi provider approach

DATA PRIVACY
- RGPD compliance
- Data privacy risk assessment
- Data governance and mapping
- Data tagging and classification
- European and international legal watch

Our support

FINEGAN Advisory supports you in mastering the ecosystem of your job processes and your information system, by ensuring :

strengthening your resilience capabilities ;
dynamic management of your IT risks;
the compliance of your cybersecurity systems

Beyond our knowledge of the cyber ecosystem and IS infrastructure resilience, we are involved in your digital transformation, the redesign of IT operational models, sourcing models and the adoption of Cloud uses in a secure environment and in a context of digital sobriety.

Our pragmatic and holistic approach to the emergence of these new challenges within your businesses allows us to address private and public players of all sizes and from all sectors.

They trust us

A major European bank

Regulatory transformation

Context: As part of the transition from Libor to RFR (Risk Free Rates), the financial management of this major European bank required support for its CIB and ALM activities.
Our mission: The objective of this service is to accompany our client in the collection of normative and reporting needs to then ensure the follow-up of the tests and propose remediation solutions.
Our added value: A strong expertise in regulatory obligations coupled with a knowledge of operational constraints for data collection.

A major French bank

Regulatory implementation

Context: The risk and finance departments wanted to be supported in the implementation of the IFRS 9 and BCBS 239 regulatory changes.
Our mission: We identified the impacts of the regulations in the information systems and in the alignment of the Finance & Risk data feed. In a second step, we ensured the implementation of the required evolutions.
Our added value : Our ability to both identify the impacts of a regulation and then ensure its operational implementation.

A large banking group

Transformation of an IT architecture

Context: The accounting department of this large banking group wanted to be supported in redefining its functional architecture.
Our mission: We intervened to define the transitional and target functional architecture of the information system, to identify the needs for central accounting (social and IFRS) and SURFI regulatory reporting.
Our added value: Our mastery of the business issues of banking accounting to ensure the operational and IT declensions.

A subsidiary of a French Mutualist Banking Group

Support for the the CISO function

Context: A subsidiary of a French Mutualist Banking Group wishes to be accompanied in the development of its Information Systems Security activities.
Our mission: Updating of the information system security policy and implementation of the principles that result from it in accordance with the Group's directives. Implementation of a risk management system and evaluation of third parties including critical IT service providers.Monitoring of security projects and participation in risk and security committees.
Our added value: Our knowledge of the information systems security practices of major accounts in the market and of the operational mechanisms for controlling the associated risks.

A banking OES

Standardization of IT risk indicators

Context: This banking OES wishes to develop and harmonize risk indicators related to business continuity.
Our mission: Implementation of a detailed procedure on the calculation of KRIs, particularly on the monitoring of critical infrastructures, aiming to homogenize the understanding and the reliability of the collections for all the subsidiaries of the banking group. Standardization of recovery tests for infrastructures supporting the IS.
Our added value: Our ability to analyze the discrepancies in the methods of calculation of risk indicators by the entities of the banking OES and our understanding of the major issues related to IT business continuity.

news

Article

The Finegan Group reinvents itself

Conquering new markets, diversifying our expertise and strengthening our teams: the FINEGAN group is reinventing itself! Discover our new ambition, through the article in Les Echos.

Study

Phising & Ransomware: Understanding to better defend yourself

Phishing is the preferred attack sector for malicious actors, and is often the gateway to your network for introducing ransomware! How does it work?

Article

DAF Trophies Magazine 2022 : Thierry Sar, multidisciplinary at heart

Thierry Sar, CFO of FINEGAN will represent the group at the best CFO contest

Interview

Interview with Emmanuel Solesse on BFM Business

Finegan is recruiting many talents to join its teams! Discover the available offers as well as the values of the group through the interview of Emmanuel Solesse for the 60 minutes program of BFM Business

Podcast

BSMART’s big interview: 5 questions for Emmanuel Solesse

We usually say that we work with clients who are like us, but I think that CSR is also about choosing partners who have the same values as us” Discover the full interview of Emmanuel Solesse, President of Finegan Group, for the program Le Grand Entretien, hosted by Michel Denisot on B SMART

Webinar

Webinar: European DORA Regulation, issues and impacts for the financial industry

Don’t miss our next webinar dedicated to the theme “European DORA Regulation, issues and perspectives” which will be held on November 10th from 11:30 am to 12:30 pm. An opportunity to discuss with our experts. Register by clicking on the link below.

Event

Finegan will be present at the AM TECH DAY 2022

On October 4th, during the #AMTechDay organized by L’AGEFI, our experts had the pleasure to speak on the subject of the democratization of data.

exchange with
our experts

Consultants, Managers, Directors, our experts are available to answer your questions and provide you with details on your subjects: contact them!

Jacques Pama

Director

OUR OTHER OFFERS

Advisory

Credit risk

Compliance

Finance

Smart Data Innovation

Innovation

Operational risk, internal and permanent control

ESG and Sustainable Development

Business Excellence

IT RISK & RESILIENCE

Advisory

Your challenges

Our offers

Our support