Lorenzo Gargaro

Ict Risk Management & Cyber Security Specialist @TIM

Roma, IT

ICT Risk Management, Cyber Security, NIS 2 compliance, Supply Chain Security Specialist.ICT Risk assessment on TIM Group ICT assets (on-premises as well as cloud systems), in order to evaluate business and ICT criticality of each asset and assess the compliance respect to national and international standards and rules (NIST 2.0, and assessment of ICT security requirements for both on-premises and cloud solutions, in order to meet national and international standards and rules as well as TIM policies and procedures.Identification and definition of risk mitigation actions and remediation plans in order to compensate and adjust non-conformities detected.NIS 2 compliance: identification and classification of ICT assets respect to NIS 2 scope, implementation of NIS 2 cybersecurity obligations, NIS 2 obligations compliance assessment.Supply Chain Security: definition and implementation of models for supply chain security management, in line with NIS 2 obligations as well as international standards on the matter. Ransomware risk analysis: identification of the most relevant ransomware threats and attack scenarios, examining for each of them the main attack techniques, tactics and procedures (TTPs) adopted as well as the main exploited vulnerabilities. Risk level assessment and identification of the main security measures to be implemented for risk mitigation.

Sapienza Università di Roma

Bachelor's Degree, Energy Engineering, Energy Engineering

Liceo scientifico "C. Cavour" di Roma

Diploma, Liceo scientifico

Sapienza Università di Roma

Master's Degree, Energy Engineering, Energy and Nuclear Engineering