Expert Cybersecurity Risk Analysis EBIOS RM

Project overview

Context

We are looking for specialized expertise in cybersecurity risk analysis according to the EBIOS RM methodology to conduct four dedicated assessments for the TORQ, Microsoft Defender, Wiz, and CrowdStrike solutions. This expertise must cover the preparation, facilitation, coordination, and formalization of all EBIOS RM workshops with stakeholders, including CISO teams, administrators, architects, and operators.

The analysis must be in-depth on the environment of each solution, its uses, its administration model, its integrations, its internal and external dependencies, as well as the associated security processes. A review of publisher recommendations, security best practices, and recognized applicable frameworks for each solution must also be included.

The objective is to identify feared events, strategic and operational scenarios, assess risks, and define concrete and prioritized treatment measures. Each analysis will be fully documented in CISO Assistant and accompanied by an executive PowerPoint presentation and a restitution meeting in English.

Finally, the expertise must allow for the proposal of a clear methodology, a realistic schedule, a detailed lump-sum charge, and actionable recommendations to strengthen risk management related to these technologies.

Missions

Tools & Environment

Working Conditions

• Prepare, plan, facilitate, and manage EBIOS RM workshops for TORQ, Microsoft Defender, Wiz, and CrowdStrike.
• Analyze, for each solution, its context, uses, stakeholders, assets, administration, integrations, and dependencies.
• Identify and document feared events, risk sources, strategic scenarios, and operational scenarios.
• Assess risks, identify existing security measures, and determine control gaps.
• Integrate publisher recommendations, security best practices, and relevant market standards.
• Create and fully update the four analysis files in CISO Assistant.
• Provide, for each solution, a PowerPoint presentation in English including the scope, approach, main risks, a risk map or heatmap, recommendations, and a prioritized action plan.
• Organize and conduct a restitution meeting in English for each analysis, including the presentation of results, a Q&A session, and validation of findings and recommendations.
• Present a detailed methodology, the estimated workload, the projected schedule, the expertise profiles involved, and similar references.
• Provide a lump-sum cost covering all activities, workshops, analyses, deliverables, restitutions, and potential validation iterations.
• EBIOS RM
• CISO Assistant
• Solutions analyzed: TORQ, Microsoft Defender Antivirus, Wiz, CrowdStrike
• PowerPoint presentations in English for restitutions
• Documented and actionable deliverables
• Restitution meetings in English
• Workload, schedule, and methodology to be defined and presented

Project details

• Start: flexible
• Remote: hybrid
• Location: 92400 Courbevoie, France, FR
• Rate: 80-80 EUR/h
• Languages: French