Who is RiskShield?

Dear customer, thank you for your interest in our company, RiskShield BV. If you are looking for expert advice on personal, physical & information security, then you have come to the right place.

Below you will find a short summary of my career so that you can form your own opinion about the expertise that I have built up during the past 25 years. With the establishment of RiskShield BV, I want to share my expertise and knowledge to help you with your security issues.

How it started

I started my career in 1999 as Customer Services Engineer Security at Telindus N.V.. At the time, Telindus was a leading integrator of ICT and communication solutions and was known in the sector as the ICT school of Belgium. My tasks: designing, implementing and supporting secure high-tech data networks (such as ATM, MPOA...) and optimizing, implementing and maintaining network intrusion detection systems and firewall architectures (Certified Checkpoint Security Expert). I provided ICT network management and information security support to various strategic customers of Telindus N.V.

The door to the world

In 2001, I was given the opportunity to start as a cyber security consultant for a leading American supplier of telecommunications solutions, Lucent Technologies World-wide Services (LWS). I was responsible for providing advice on information security to both internal and external customers of this multinational, creating training materials and giving briefings on security technologies and concepts, performing information security analyses and providing expert advice on drawing up, verifying and optimizing an information security policies, based on ISO 17799, the predecessor of ISO 27001…. Being part of LWS gave me the unique opportunity to spar with leading security specialists from the former renowned Bell Labs Laboratories. During this period I was also a member of the ISSA board (BE chapter) and active in ISACA.

From advice to management

In 2003 the dotcom bubble burst and it was time to explore new horizons. I left the consultancy world and was recruited by Fluxys N.V., the national gas network operator in Belgium that was still part of the Suez Group (together with Electrabel, Tractebel, Fabricom...) at the time, as Information Security Officer to manage information security for ICT and OT and to play a leading role in the inter-company security working group of the Suez Group. I was the security coordinator and the single point of contact within Fluxys for all information security related matters. From 2006 I was asked to additionally become responsible for physical security within the company. I hereby designed the security concepts for gas compression stations, metering stations and an LNG Terminal. Since then, I developed and managed a fully integrated Enterprise Security Office. Responsible for organizing security by developing policies and overseeing their proper implementation, monitoring the threat landscape, responding to security incidents, reactively and proactively assessing and recommending safeguards and countermeasures and ensuring organization-wide security awareness, I established a security culture to protect all Fluxys people, assets and installations. During this time, the company was designated as a European Critical Infrastructure Operator.

A global integrated security approach

In 2011, I was asked by a senior DEME N.V. Director to build up and manage an Enterprise Security Office from scratch. As Enterprise Security Officer, I was globally responsible for managing and controlling all risks and threats of malicious nature against the personnel, the company information and its physical assets and property worldwide. I set up the DEME Enterprise Security Office, advising and assisting the Board of Directors and Senior & Line Management in all security-related matters. I acted as expert and security officer for the function of "Security Officer" within the context of the BE law of 11 December 1998 (NAT, EU and NATO Security Clearances) and RAMAS (nuclear sources) legislation, where I facilitated all interactions with national, EU and international police, justice, intelligence, defense and diplomatic entities. My main duties within DEME: provide periodic updates to senior management on the global security risk landscape and to perform personnel, physical and cyber security risk assessments, develop security policies, standards and procedures based on various leading standards (ISO27001 for ICT security, the NIS2 directive for information security, ISA62443 for OT security, IMO resolution MSC.428(98) for cyber security of ships, the CER directive for physical security), create a high level of employee awareness focusing amongst others on (corporate) espionage threats and support and assist line management in achieving compliance with the group’s security policies and procedures and/or respond to specific security issues.

As a security officer at the DEME Group, Stefaan held a BE, EU, NATO security clearance of the SECRET level.

During his career, Stefaan obtained the following physical and information security certifications:

• - Graduate in the security of Radioactive Material in use and storage (IAEA/FANC Training)

• - Graduate Higher Studies Police, Justice and Corporate Security (ECSA)

• - Predictive Profiling and Terrorist Threat Mitigation program (ECSA)

• - Certificate of competence for management personnel type A (100 hours) for security (G4S and Securitas)

• - ISPS Port Facility Security Officer - PSFO (G4S)

• - ITIL3 Foundation

• - ISO27001 Senior Lead Implementer

• - CISA - Certified Information Systems Auditor (ISACA)

• - CISSP - Certified Information Systems Security Professional (ISC)²