Francesco Iacuzzi Email and Phone Number

Within Leonardo, I am part of the InfoSec team, where we evaluate and authorize most of the company's projects, ensuring that they comply with security standards. Our work includes assigning L1 security requirements, based on NIST guidelines. Once these requirements are assigned, we receive the implementation solutions from the various teams, we review them for suitability and then request proof-of-concept tests. These security requirements are applied to all projects developed within Leonardo.

- Web Application Penetration Testing (WAPT) for various national and international clients, using black, grey, and white box approaches and following the OWASP methodology.- Ethical Hacking and Infrastructure Vulnerability Assessment & Penetration Testing (VAPT).- Open Source INTelligence (OSINT): researching, collecting, and analyzing data and information (e.g., SSL configuration analysis, web server scanning, DNS configuration) of public interest from open sources (Clear and Dark Web).- Attack Surface Monitoring: continuous monitoring, classification, and assessment of the security posture of the company's IT assets to reduce risk exposure.- Cyber Maturity Assessment (CMA): determining the risk level to prevent, detect, contain, and respond to cyber threats.

Implementation of techniques for the comparison of images of slides acquired from different sections of the fabric and in different time moments. Implementation and validation of markers co-location techniques and verification of their prognostic and diagnostic value.