Our speakers - Programme 2021

Roman Borisovich is the Executive Director of Sardina Systems S.à.r.l., the maker of FishOS operating system for cloud computing. 

Having started his career on Wall Street as a derivatives trader, Mr Borisovich moved to investment banking.  He led many remarkable precedent-setting transactions at Merrill Lynch, Standard Bank, and Deutsche Bank. In 2007 he joined the largest Eastern European insurance conglomerate Rosgosstrakh as the Group CFO and Vice-President and steered it through the global financial crisis to its historic IPO.  Mr Borisovich also serves on the International Advisory Council of London-listed APQ Global investment company and chairs the Board of ClampK NGO.

Mr. Borisovich holds a Master’s degree from Columbia University, Non-Executive Director Diploma from the Financial Times, and CAMS (Certified Anti-Moneylaundering Specialist) certification from ACAMS.

Maxime is a Senior Manager in the Cyber Security team who develops his ethical hacker’s skills by committing himself in various assignments for big companies, banks and European institutions. As a technical specialist, he takes part in penetration tests, vulnerability assessments, incident response and information security advisory assignments. Maxime has also gained experience in the physical security field during intrusion assignments (social engineering) and conducted vulnerability research in access control equipment.

His priority is to sharpen his technical skills but he also appreciates building and maintaining customer relationships. He especially enjoys sharing knowledge by presenting his results or by giving talks and training courses. Maxime teaches IT security at a French engineering school.

Edouard is a Senior Advisor within the Cybersecurity Advisory team of PwC Luxembourg. His missions include monitoring on-prem and cloud infrastructures for clients, threat hunting, incident response and forensic investigations. 

When he is not on assignments, he contributes to improving the CSIRT capabilities by testing new software or techniques, analysing malware and developing custom tools. His main focus is on defending IT infrastructures but he also takes interest in the offensive aspects of cybersecurity and keeps up with the tools and techniques used by malicious actors.

Since 2019, Arnaud Dechoux has been the Public Affairs Manager for Europe at Kaspersky, part of the company’s government relations council. In his role, Arnaud oversees Kaspersky's governmental and institutional relations in France, Southern Europe, and French-speaking Africa, with the objective of developing partnerships with public authorities and other stakeholders in the regions. In addition, Arnaud plays a key part in driving the company’s efforts to protect users against the threat of stalkerware – secret surveillance software used in the field of domestic violence. In particular, he coordinates the TinyCheck open-source project and its deployment with NGOs and law enforcement authorities.

Before joining Kaspersky, Arnaud worked for 10 years as a consultant in public affairs and crisis communication for various organizations in the digital, security and other sectors. Passionate about history, geopolitics and defense issues, Arnaud is a graduate of ESCP Europe and a reserve officer in the French Navy.

Professor Paul De Hert is Vice-Dean of the Faculty of Law & Criminology of the Vrije Universiteit Brussel (VUB), is Director of the Research Group on Human Rights (FRC) and former Director of the Research group Law Science Technology & Society (LSTS), and of the Department of Interdisciplinary Studies of Law. Paul De Hert is also associated-professor at the Tilburg Department Law, Technology, Markets, and Society (LTMS).  He is board member of several journals such as The Computer Law & Security Review (Elsevier), The Inter-American and European Human Rights Journal (Intersentia) and Criminal Law & Philosophy (Springer). He is co-editor in chief of the Supranational Criminal Law Series (Intersentia) and the New Journal of European Criminal law (Sage).

Matthieu has joined the Cybersecurity team at PwC Luxembourg in 2017 with the objective to assist clients dealing with Information Security matters. 

He leverages his technical and operational expertise to act as a subject matter expert on consultancy assignments.

Since the creation of the Cloud Security service, Matthieu has had the opportunity to support several customers in their transition and their security improvement.

Loic is a Managing Director at PwC Luxembourg, working in the Data, Analytics & AI practice.

In the last 25 years, he has been leading 'data-centric', strategic and transformation programs. He is currently focusing on leveraging top-level 'data skills' (Data Governance, Big Data, Data Science and AI, Data Citizenship) for the financial sector (investment & asset management, retail banking), energy & telco and public sector (Luxembourg and EU).

Andrea joined RSA in March 2018 to Develop and Manage the RSA Cyber Insurance Solution for UK and International customers. She joined from Aon, where she most recently served as EMEA Cyber Sales Leader, responsible for the development of the EMEA and LatAm Cyber risk and Insurance proposition.

Over 15 years combined experience in the Insurance Industry in London, Spain and Colombia, has Lead Financial Lines and Cyber broking teams for EMEA & LatAm regions in the London Insurance broking market, contributing towards Cyber strategic conversations and discussing complex ideas and creating solutions for large, sophisticated clients or engaging with a broad range of stakeholders or management teams.

Andrea holds a LL.B., in Law (Hons) from Colombia, Masters Degrees in Insurance, Personal Insurance and Risk Management and certificates in Cybersecurity, Leadership and Management from Harvard University;  is CIPP/E and recently obtained an Advanced IT Security certificate from Stanford University.

Speaker and Chair at conference and Cyber events in LatAm and Europe; Fluent in Spanish, Portuguese and English and contributed to Cyber resilience articles.

LinkedIn: https://www.linkedin.com/in/andrea-garcia-beltran-89742931

A proven Information Security and Risk professional, Krystina has over 10 years experience in multiple domains including Cryptography, Identity and Access Management, and Risk Management. 

She has a spearheaded mindset to innovate traditional security practices, while taking an energetic lead to promote women joining the profession. Not initially starting her own career in information security, Krystina understands how valuable people can be from different experiences can help shape and progress the future of the industry. For the last few years she has focused on mentoring women keen on changing careers.

In addition to mentoring, Krystina enjoys giving back by delivering security awareness and believes strong cyber hygiene in the workplace begins at a personal level.

Nicolas Hamblenne is a Senior Associate within the Technologies & IP department and Commercial Contracts practice of PwC Legal Luxembourg. Prior to joining the firm in July 2020, Nicolas spent 5 years in an independent leading Belgian law firm as Senior Associate of the Data, IP & Media practice.

Nicolas Hamblenne advises clients on a wide range of information technology and communications matters and has extensive experience in data protection matters (including GDPR compliance), commercial and IT agreements as well as marketing and advertising law.

Nicolas also handles issues related to protecting, enforcing and defending intellectual property rights (mainly copyright and trade mark) and assist clients in order to optimise their IP protection strategy by drafting and negotiating all types of IP contracts including licensing, distribution, franchising and merchandising contracts, acquisition and assignment agreements.

Since 2017, Nicolas is CIPP/E Certified from the IAPP (International Association of Privacy Professionals) and is also a member of the AIPPI (International Association for the Protection of Intellectual Property).

Since January 2021, Nicolas is also a Young Privacy Professional at the IAPP for the Luxembourg Chapter.

In addition, Nicolas has been teaching « Privacy and laws in the digital world » at IHECS in Brussels (Master 2 – Marketing students) since 2016.

Maxime joined PwC in September 2019 as a Senior Manager within the Insurance Advisory Practice.

He joined from AXA Luxembourg where he has acted as chief of staff to the CEO and was leading transformation programmes relating to Operating Model Transformation and Operational Excellence. 

He started his career in Luxembourg as a consultant in the IT risk and governance field. 

He has over 11 years combined experience in the Financial Industry and especially in the Insurance sector in Luxembourg.

He holds a double Masters degree in Business Engineering and Entrepreneurship (Magna cum laude) from Louvain School of Management.

LinkedIn: https://www.linkedin.com/in/maximehennau/

Alain Herrmann has been a civil servant with the CNPD since 2012. He started there as an expert in IT and new technologies to progress to the position of Head of the Compliance department. Since September 2021, he has been Data Protection Commissioner at the CNPD.
Previously, he was active for over 14 years as an engineer and consultant in IT security / information security with various private organizations.

Antonín developed an expertise on the General Data Protection Regulation (“GDPR”) and has managed teams delivering various types of projects ranging from Gap analysis to Implementation as well as delivering client training on the GDPR impacts and general awareness. He has also delivered projects aiming to optimize the operational effectiveness and efficiency for PwC clients.

Antonín is the Privacy (incl. GDPR) solution driver at PwC Luxembourg assisting the Partner in charge develop the Privacy business.

Tine A. Larsen was appointed one of four commissioners of Luxembourg’s Data Protection Authority as of 1st November 2014 and assumes the presidency of the collegiate body.

She holds a Master in Law with a specialisation in commercial law from the University Robert Schumann in Strasbourg, France, and an MA in International Peace and Security from King’s College London.

She took the bar exam in Luxembourg in 1999 and practised as a lawyer before joining the Luxembourg Government Administration in 2003. After two years as an attaché with the Luxembourg Army Headquarters, she joined the National Rescue Services Agency. As of 2008, she was the head of its administrative, technical and medical division.

Mrs Larsen represents Luxembourg DPA at the European Data Protection Board. She is also a member of the national “Judicial Oversight Authority” (Autorité de contrôle judiciaire), the national “Information Commission” (Commission d’Accès aux documents), as well as an advisory member of the Luxembourg Human Rights Consultative Commission.

Christina Lekati is a psychologist and a social engineer.

With her background and degree in psychology, she learned the mechanisms of behavior, motivation, decision making, as well as manipulation and deceit. She became particularly interested in human dynamics and passionate about social engineering.

Contrary to typical career paths, her involvement in the cybersecurity field started quite early in her life. Raised by George Lekatis, a sought-after cyber security expert, she found herself magnetized by the security field at a very young age. Growing up, she was able to get involved in different projects that were often beyond her age, giving her an edge in her own knowledge and experience.

Christina has participated among other things in penetration tests, in training to companies and organizations, and in needs and vulnerability assessments for companies and high-value targets.

She is working with Cyber Risk GmbH as a social engineering trainer and consultant.

Christina is the main developer of the social engineering training programs provided by Cyber Risk GmbH. Those programs are intertwining the lessons learned from real life cases and previous experiences with the fields of cybersecurity, psychology and counterintelligence. They often cover unique aspects while their main goal is to inspire delegates with a sense of responsibility and a better relationship with security.

Being committed to sharing knowledge and expertise, Christina is also a speaker. She participates in a variety of cyber security events around the globe, raising awareness and educating people on social engineering techniques and the psychological elements involved in human hacking.

She is also an active Advisory Board Member at the OSINT Curious project, contributing to the international scene of Open Source Intelligence (OSINT) with the latest news, updates and  techniques on collection and analysis.

Marc is in charge of the new departments “Awareness” (communication, awareness rising, training, technology watch, innovation) and “Conformity”(accreditation, certification schemes, data protection impact assessments, codes of conducts). Before joining CNPD, he was an independent advisor for innovation-driven companies and public organisations and had leadership positions in the Luxembourg public research ecosystem and industry.

Koen is an advisory Partner at PwC Luxembourg, leading the Cyber Security practice with 20 years of experience in Information / Cyber security in cross industry environments.

Koen is specialised in Secure Operations Centers, incident response and awareness raising at all levels of an organisation. He has experience with Distributed Ledger Technology, IoT, OT/IT security, threat intelligence and forensics.

Koen has a strong technical background and operational experience in cyber security as well as strong competencies in security architecture, solution design, program management, business development. 

Steffen, who has 20 years of experience in the areas of IT security, risk management, and IT governance, is the Head of IT Security of the European Investment Bank (EIB), the biggest multilateral financial institution in the world and one of the largest providers of climate finance. He started his career in IT audit and security consultancy with PricewaterhouseCoopers in Germany and later in Hong Kong. Following this, he entered the fascinating world of multilateral development banks, where he assumed different roles such as the head of information security at the Asian Development Bank in Manila (Philippines) and IT compliance supervisor at the World Bank in Washington, DC (USA). Steffen’s unique exposure to all three lines of defence allows him to look at cybersecurity and resilience from different perspectives. He is also the EIB representative to the Steering Board of the Computer Emergency Response Team for the EU institutions, bodies, and agencies (CERT-EU) and represents the Bank in IT Security related sub-committees of the EU institutions.

Following a career as financial controller and manager Paul decided to focus on the challenges of security from the year 1999 onward. Supporting private- and public sector organisations to improve their cybersecurity resilience.

In a variety of roles, ranging from program manager and consultant to taking on the responsibility of CISO of (inter)national organisations. 

Taking on the responsibility of implementing effective and proportional technical and organisational measures and controls in ever-changing, dynamic ICT landscape in a variety of markets. 

Paul witnessed the introduction of the personal computer, observed the demise of the mainframe, the birth of the internet and the spectacular adaption of the Cloud

Formalised his experience and knowledge by obtaining and maintaining professional security – certification.

Even before the GDPR became relevant Paul took a keen interest in the dilemma’s related to the protection of personal data and privacy in 2015 so he got certified and professionally involved – as a DPO – in that area as well.

Paul strongly believes that sharing knowledge and experiences is key to address the complexity of today’s world. He’s therefore contributed to professional books and published various articles and blogs. He's always willing to share his thoughts as a speaker and striving to initiate and maintain professional networks in the security and privacy community.     

Linkedin: https://www.linkedin.com/in/paulwmoor

Maxime Pallez is currently, and since August 2021, a cybersecurity senior manager at PwC Luxembourg. He joined PwC in 2014 and works on the governance aspects of cybersecurity. 

He is focused, in particular, on the risk management, security awareness, third party security assessment and cybersecurity maturity assessments topics where he proved his experience and knowledge with various clients from various industries.

Expertise:

• Cybersecurity governance
• Security Awareness
• Third Party security
• Cybersecurity maturity assessments
• Information Risk Management
• ISMS assessment/implementation

Lisa has over 20 years experience in the Financial Services industry.  She has worked in various roles from client management to change management.  In the last 6 years she has been primarily engaged in regulatory change programmes which ultimately led her to specialise in Data Protection, completing her certification for CDPO in late 2017.  She joined IFDS in February 2019 as their registered DPO for Ireland and Luxembourg.

Nicolas Prémont, holds a master's degree in computer science and innovation, and has taken on many jobs in the private and public sector over the past 20 years.

His skills, personal qualities and organisation led him to his current position where he advises and supports the management of the Customs and Excise Administration. Dealing with delicate and heterogeneous issues, his understanding allows him to quickly identify opportunities, propose pragmatic solutions and initiate innovative changes with the quality expected.

In his field of activity, the protection of personal data has become more and more important so that, as the circumstances encountered by the administration have changed, Nicolas developed his new function of DPO with the same success as these other functions and projects.

For data protection, his attention is currently focused on minimising access, information and awareness of risks, video surveillance and the organisation of administrative and criminal processing.

Jaime Prieto, Lawyer (registered in Luxembourg), Chief Compliance Officer specialized in investor protection, data protection and professional secrecy, prevention of market abuse, prevention and management of conflicts of interest, fight against financial crime, Anti-Money Laundering and Counter Terrorism Financing.

Jaime is a recognized expert in data protection and data privacy having held the role of DPO for reputable financial institutions including banks, PFS and investment firms.

Holding extensive professional experience in both public and private sectors including an in-depth knowledge of Anti-Money Laundering investigation, fraud investigations, client Identification, forensics and provision of legal training and advice.

Significant multijurisdictional expertise developing and applying policies, procedures and monitoring programs.

 Additionally, he is an experienced trainer for the EU, Luxembourg and some local organisations.

Mirko Ross, born 1972, is an internationally recognized activist, expert, speaker, publicist and researcher in the field of Cyber Security and the Internet of Things. At the age of 14, he began investigating vulnerabilities in IT systems. Instead of a career as a hacker, he decided to found during his studies his first company digital worx, focusing on Internet software development. Mirko has been a member of the Expert Group on Internet Security of Things of the European Cyber Security Agency ENISA and advises the EU Commission as an expert. He is also active in international committees and research projects in the field of cyber security and blockchain technologies. Mirko is still closely associated with the positive hacker attitude and maker movement and promotes non-profit projects in the field of Open Data and IT education. In 2018 he founded a new company, asvin.io, with the aim of increasing cyber security in the Internet of Things and providing software solutions for this purpose, leading asvin to the best Cybersecurity Start-up in Germany by 2020 rated by it-sa. Mirko lives in the countryside and works in Stuttgart.

Audrey is the Partner in charge of the Technologies & IP practice at PwC Legal Luxembourg. She notably advises clients in relation to privacy matters and data protection issues and is very involved in assisting and managing GDPR compliance projects for local and multinational clients.

Starting his career 25 years ago in the technical field of IT, Fons has had the opportunity to gain experience in different companies ranging from Advisory to Service Provider. 

During the last 3 years, he has leveraged his IT production background to modernize and industrialize the Cargolux infrastructure. 

His commitment led him to become the CTO of Cargolux, a flagship from the Luxembourgish economy and one of the biggest aerian fret companies in the world.

Harm is an experienced IT Architect and Cyber Security specialist with a demonstrated history of working in the information technology and energy industry, focused on innovation. Skilled in Electric Mobility, Cyber Security, Energy and blockchain (distributed ledger technology). He is always looking for innovation, new technologies and how this can fit in the current processes and way of working.

After my studies of "Computer Science" at the RWTH Aachen, I joined the information security team at Spuerkeess in 2000.
Being in charge of the "Operational IT Security" for several years, I finally took over the role of "Information Security Officer" in 2019 while joining the risk department as Deputy Head of Risk Management.
Since 2018, I am also leading the "Trust and Cybersecurity Committee" at the ABBL.

Personal interests: 

When not dealing with cyber issues or spending quality time with my family, I can be found  lying under broken oldtimers, improving my kickboxing skills or running through nature.

Thomas joined the firm in 2001 and he is a Director in the Risk Assurance department at PwC Luxembourg.

He has extensive experience in providing IT Risks, Business Continuity and Crisis Management services to clients in several industry sectors (i.e. financial sectors, operational companies and European Institutions). He is CISA, ISO27001 and ISO22301 Lead Implementer certified as well as DRII certified.

He developed expertise in Business Continuity Management implementation project (BCP/DRP) and has been assisting our clients in the last 16 years in identifying risks and performing BIA’s analysis, defining emergency and operational recovery procedures as well as dealing with Crisis Communication procedures.

Thomas has also developed a customized Live Crisis Simulation Exercise within our Experience Center to increase the reality level. He currently explores new technologies such Virtual Reality (VR) to propose our clients new experiences.

Philip R. Zimmermann is the creator of Pretty Good Privacy (PGP), which has grown from its origins in 1991 as a human rights tools to become the most widely used email encryption software in the world. Since 2004, his focus has been on secure telephony for the Internet, developing the ZRTP protocol and creating products that use it. He is Co-founder of Silent Circle, a provider of secure telephony services.

Zimmermann has received numerous technical and humanitarian awards for his pioneering work in cryptography. In 2015 he received the US Privacy Champion Award from the Electronic Privacy Information Center. In 2014 he was inducted into the Cyber Security Hall of Fame, and Foreign Policy Magazine named him one of the Leading Global Thinkers of 2014. In 2012 the Internet Society inducted him into the Internet Hall of Fame. In 2008 PC World named him one of the Top 50 Tech Visionaries of the last 50 years. In 2006 eWeek ranked PGP 9th in the 25 Most Influential and Innovative Products introduced since the invention of the PC in 1981. In 1999 he received the Louis Brandeis Award from Privacy International, in 1998 a Lifetime Achievement Award from Secure Computing Magazine, and in 1996 the Norbert Wiener Award from Computer Professionals for Social Responsibility for promoting the responsible use of technology. He also received the 1995 Chrysler Award for Innovation in Design, and the 1995 Pioneer Award from the Electronic Frontier Foundation.

Zimmermann teaches crypto at Delft University of Technology's Faculty of Electrical Engineering, Mathematics and Computer Science, in the Netherlands. He received an Honorary Doctorate (Docteur Honoris Causa) from the Université Libre de Bruxelles in 2016. He received his bachelor's degree in computer science from Florida Atlantic University in 1978. He is a member of the International Association of Cryptologic Research. He served on the Roundtable on Scientific Communication and National Security, a collaborative project of The National Research Council and The Center for Strategic and International Studies. He also served on the Board of Directors for Computer Professionals for Social Responsibility, and on the Advisory Board for Santa Clara University's Computer Engineering Department, and served as Fellow at the Stanford Law School's Center for Internet and Society.