Chiara Vitali

Security Governance @GOSP - Generali Operations Service Platform

Mogliano Veneto, IT

The aim of my activities is to review and improve the Information Security Management System controls, support and manage the Security certifications/audit activities requested by Customers and Head Office, facilitate reporting capabilities and define related processes to provide meaningful security reports and dashboards. In particular, the daily activities concern- Security KPI: identification, evaluation, collection and reporting of security Key Performance Indicators, continuously measuring the Security performance in order to facilitate the identification of gaps between the current and desired target- ISO 27001 Certification of the 6 Branches located in Europe: management of internal and external compliance assessment of Information Security Management System, evaluation of existing controls and mitigation actions and reporting to CSO and CEO- Cyber Risks Management: identify, measure, manage, control and report present and forward-looking risks that could arise from the GOSP activities with impact on the firm\'s IT system- Phishing Campaigns: arrangement and management of Local and Global phishing campaigns aimed at knowing and continuously improving the cybersecurity knowledge inside the firm- Weekly sharing with the Security Division Head and the Department Heads of the status of findings with the related remedial actions. risks and security regulations to be adopted in order to highlight and address the criticalities that could arise- Management of internal and external teams and support in collateral activities of the Unit, like: Third parties Security Management, Cyber Risk Assessment, IT Risk Assessment, ISAE3402 Certification and Financial Risk Reporting.

Università Cattolica del Sacro Cuore

Political and Social Sciences

University of Padua

Political Science

Technical Institute for Surveyors

Surveyors