Patrick B.

Oct 7, 2026

I’m delighted to share that PECB has approved my application and awarded me the ISO 31000 Senior Lead Risk Manager credential.

After successfully completing my examination, this certification recognises both the knowledge I have acquired and the experience I have gained throughout my professional journey—from the technical aspects of information protection to governance and enterprise risk management.

I would like to take this opportunity to thank all the clients, colleagues and partners with whom I have had the pleasure of working on past assignments. These collaborations enabled me to apply risk management principles in real-life situations: identifying and assessing threats, supporting informed decisions, defining proportionate responses and helping organisations protect the information entrusted to them.

I am also grateful for the valuable discussions and exchange of experience during the Belgian Cyber Security Coalition’s GRC Focus Group meetings. Exploring risk and governance topics with fellow professionals has broadened my perspective and supported my ongoing development in this field.

This achievement reflects the value of these shared experiences, the challenges we addressed together and the lessons I learnt along the way.

I look forward to continuing to help organisations manage uncertainty, strengthen their resilience and safeguard the trust placed in them.

https://www.credly.com/badges/1128d123-472b-4caa-8a36-a95481a09671

#ISO31000 #RiskManagement #GRC #CyberSecurity #InformationProtection #Governance #PECB #ProfessionalCertification #Belgian Cyber Security Coalition

View post

Sep 25, 2026

🔐 Cyber Renaissance – Reclaiming Control in the Age of AI

I had the opportunity to attend BE-CYBER 2026 – Cyber Renaissance in Wavre this week.

It was a particularly insightful day, with a broad range of topics, excellent speakers and, just as importantly, valuable conversations among fellow cybersecurity professionals.

Beyond the individual sessions, one message stood out to me:

AI is changing not only what we can do in cybersecurity, but also what we need to secure.

A few key takeaways from the day:

▸ From “Human in the Loop” to “Human in Command”

Keeping a human involved is no longer enough. As AI advances in analysis, recommendation and action, we must ensure that human judgement, accountability and the ability to challenge decisions remain in control.

▸ Agentic AI introduces a fundamentally different attack surface

When AI systems access data, retain memory, invoke tools and execute actions, securing the model is only part of the equation. Context, permissions, memory, integrations and actions also form part of the threat model.

▸ AI is accelerating the vulnerability lifecycle — for defenders and attackers alike

AI has significant potential for code review, vulnerability detection, testing and incident analysis. However, adversaries can also accelerate their activities. The real challenge is not just identifying and fixing vulnerabilities, but doing so faster than attackers can exploit them.

▸ Identity can no longer be trusted simply because it looks or sounds convincing

Deepfakes, synthetic voices and increasingly sophisticated digital identities are challenging assumptions behind remote verification. For sensitive operations, strong authentication and independent verification channels are becoming increasingly important.

▸ Digital sovereignty is also about resilience and dependency

The question is not merely where a provider or its infrastructure is located. Jurisdiction, technical dependencies, exit strategies, portability and the ability to continue operating when a critical service becomes unavailable are equally important considerations.

Perhaps my strongest takeaway is that digital trust increasingly needs to be demonstrated rather than assumed.

AI will undoubtedly help us detect, analyse and respond more quickly. However, it also requires us to rethink identity, access, traceability, testing, governance and accountability.

The objective should not be to resist automation, but to use it without surrendering control.

AI can assist. AI can accelerate. AI can automate.
But humans must remain in command.

Many thanks to the Belgian Cyber Security Coalition, the speakers and everyone I had the pleasure of meeting and exchanging ideas with during this very worthwhile day.

#CyberSecurity #ArtificialIntelligence #AgenticAI #CyberRisk #DigitalTrust #InformationSecurity #HumanInCommand #CyberRenaissance #NezhaConsulting

View post

Sep 7, 2026

As one chapter closes, a new opportunity to drive security excellence begins.

My CISO-as-a-Service mandate with parking.brussels wraps up this Friday, 11 September. I want to extend my sincere thanks to the teams there for their unwavering trust and the high-quality collaboration that allowed us to achieve so much together.

Starting Monday, 14 September, I am available for a new freelance mission where I can apply my 30+ years of expertise to your security challenges. Whether you need to bridge a leadership gap or navigate complex regulatory waters, I am ready to step into the following roles:

🔹 CISO as a Service / Fractional CISO

🔹 Interim CISO

🔹 Senior Cybersecurity & GRC Consultant

🔹 ISO/IEC 27001 and NIS2 Expert

🔹 Information Security Governance, Risk & Compliance Advisor

🔹 Security Transformation or Compliance Programme Lead

I specialize in helping public and private sector organizations across Belgium and Europe build pragmatic security governance that doesn't just check a box, but actively supports business objectives.

My core focus areas include:

• Information security governance and executive advisory

• ISMS design, implementation, and continuous improvement (ISO/IEC 27001)

• NIS2 and GDPR compliance strategies

• Risk management, internal audits, and executive reporting

• Securing critical and highly regulated environments

• Security awareness, training, and talent development

• IT/OT security convergence (ISA/IEC 62443)

I am looking for a project where I can translate strategic vision into tangible results through a hands-on, pragmatic approach. In an era of increasing threats and tightening regulations, having the right leadership in place is no longer optional.

If your organization needs experienced cybersecurity leadership—or if you know a team that does—let’s connect. Please feel free to reach out directly or share this post with your network.

#CISO #CISOasaService #FractionalCISO #Cybersecurity #GRC #ISO27001 #NIS2 #InformationSecurity #Freelance #OpenToWork

View post

Jun 8, 2026

📢 If you work in tech — or know someone who does — this one is worth your attention.

Itzel, whom I had the pleasure of meeting through Women4Cyber, is hosting a workshop in Brussels on 22 June that I genuinely believe matters:

🔍 #WomenInTech Audit: What is your level of professional confidence?

A sobering figure: by age 35, 50% of women in tech have left — or are leaving — the industry. Not because of family choices. Not because the work is too hard. But because recognition and progression too often elude them.

In two hours, you map your current situation, identify your blind spots, and walk away with actionable levers — tailored to your own reality.

📍 The Nine — 69 Rue Archimède, 1000 Brussels

🗓 Monday, 22 June 2026 | 6:00 PM – 8:00 PM

As a man working in cybersecurity, I believe diversity isn't a nice-to-have — it's a genuine competitive advantage. Sharing this event is my small contribution to making that real.

👉 Registration link in the comments.

#WomenInTech #Diversity #Cybersecurity #Women4Cyber #TechCareer #Brussels #Leadership

View post