Christophe Buschmann Email & Phone Number

Luxembourg, Luxembourg, Luxembourg

In charge Technology Risk and Data Protection

Luxembourg

-In charge of the "Investigations" department which comprises the following units: “Data protection audits”, “On-site inspection” and “Data breaches;-Speaker and trainer at +50 public events during the introduction of GDPR;-Development of the CNPD investigation methodology in line with EU cooperation requirement between Supervisory Authorities, including internal guidance, procedures and templates and training;-Deployment on the Act of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework : “Règlement d’ordre intérieur”, “Règlement relatif à la procédure d'enquête”, "Procédure relative aux réclamations devant la CNPD" as well as various internal procedures and guidelines.-Design of the audit campaign on the function of the DPO, then head of investigation for the execution of investigations in the following sectors (insurance, finance, health and public sector);-Design of the audit campaign on transparency in the e-commerce sector, then head of investigation for the execution of investigations;-Design of the on-site inspection campaign on the monitoring of employees on their workplace, then head of investigation for the execution;-Head of investigation for data protection audits with IT complexity and/or specific governance aspects (e.g. behavioral advertising, information security, ...);-Design of the initial "GDPR CARPA" certification scheme in close collaboration with several companies active in the audit business as well as other regulators;-Management of the CNPD digitalization project, consisting in particular in the implementation of a dedicated SharePoint platform (design, support during development, then deployment);-Finalization of a “Regtech” project in partnership with LIST and SMC, and deployment of the academic project on an industrial platform (CST: Compliance Support tool);

Luxembourg

-Organizational analysis and definition of an operating model (Target Operating Model) for a public service outsourced to private companies. Assistance in the development and monitoring of the tendering process and in the deployment of the new operating model;-Design and deployment of a data privacy and information security governance framework aligned with ISO 27001 and ISO 27799 for a public institution in Luxembourg ;-Design of the control environment for logical access to an outsourced banking system of a multinational financial institution;-Review of the security concept of a health data exchange platform for a public institution;-Execution of « Agreed Upon Procedures » (AUP) in the context of the a major funds migration (Activities included: Fund Administration, Transfer Agency and Custody). -Market analysis for a digital strategy of a large retail bank (focus on regulatory requirements for a end-to-end dematerialization of client onboarding processes);-Compliance audit against ISO 27001 - "Information and communication technologies" requirements of a Luxembourg public institution on behalf of the European Commission;-Regulatory gap analysis against CSSF circulars 12/552 and 13/554, with a particular focus on the use of a SWIFT gateway outside Luxembourg;-Assistance of banks in the preparation for the "Asset Quality Review" by the European Central Bank;-Compliance review of a "business plan" for a new organization opting for "PSF" status.

Luxembourg

-Member of the Project Management Office (PMO) for an IT migration after acquisition of a major bank (in charge of the migration of derivatives as well as for defining the controls framework to obtain assurance on account balances and securities positions);-Member of the Project management Office (PMO) for the deployment of a national electronic ticketing solution in the field of public transportation;-Analysis and simulation of organizational and operational measures to optimize traffic at peak times in the field of public transport;-Analysis and development of an electronic archiving policy for a financial institution in line with legislative and regulatory requirements (PSDC);-Comparative study and development of a pricing concept for the use of infrastructures in the field of public transportation. Development of an automated tool to simulate revenues resulting from the deployment of the concept according to different parameters and scenarios;-Development of a security framework concerning the deployment of the BYOD (Bring Your Own Device) concept for a public institution;-Execution of specific technical “Agreed Upon Procedures” (AUP) in regards to the correct implementation and operation of a key algorithm relied upon by an SPV (Special Purpose Vehicle);-Various ISAE 3000/3402 type audits (former SAS70) mainly in the financial sector;-Various IT audits mainly in the financial sector (either in support of the financial audit or on specific regulatory requirements related to IT).

Engineering, Computer Science And Management

Engineering, Computer Science And Management

Deug, Mathematics, Physics And Computer Science