Jonas Dewit

Consulting services in the GRC (Governance, Risk and Compliance) practice:
• BIA (Business Impact Analysis) in preparation of the development of a BCP (Business Continuity Plan) for a client in the broadcast media sector.
• Development of a cyber security assessment methodology/framework, aligned with CIS Controls v.8 and ISO 27000.
• Cyber Security Assessment for a client in the events services sector.
• Deployment of an ISMS (Information Security Management System) on Atlassian Confluence and alignment with the internal context, for a client in
the public sector.

Making Tamahris a 'security-oriented' organisation:
• Implementing an Information Security Management System at Tamahris in view of ISO27001 certification.
• Implementing and streamlining information security and data privacy policies, procedures and best practices.
• Ensuring that solutions can be delivered to clients with the highest possible level of security.

Building innovative solutions on top of, in, and around Cornerstone:
• integration with Microsoft Teams for training virtualisation
- integration with Azure through the Microsoft Graph API
- storage of data in Elasticsearch
- automatic deployment of resources (Azure App Service, Key Vault, App Configuration and Elasticsearch cloud instance) and creation of integration
service (JSON file) through ARM templates in Azure DevOps Pipelines
- creation of custom integration tasks for the HIQ Frends iPaaS in C#
• job alerts and referrals solution
• digital attendance registration (QR codes for training attendance confirmations)
• solutions for 'core' data integration use cases

• Production support on IBM IIB, MQ and Datapower
• Development of web service proxies on IBM Datapower
• Setup of a monitoring framework based on the Elastic stack (Elasticsearch, Logstash and Kibana) and Apache Kafka for the offloading of business
monitoring events from IBM MQ into Elasticsearch via Kafka, using custom Ruby code for the event aggregation.
• Testing of integration services
• Creation of a set of sanity checks for automation in Jenkins
• writing technical documentation

Completed modules:
- Professional research project
- Network Security
- Systems Security
- Data Management
- Information Security (focus on ISO27001)
- Digital Forensics