IT Risk, Cybersecurity & Digital Resilience
Secure, Transform and Strengthen Your Digital Environment
IT Risk, Cybersecurity & Digital Resilience Services
Technology has become a critical enabler of business performance, innovation, and growth. At the same time, organizations face increasing cyber threats, evolving regulatory requirements, growing operational dependencies, and heightened expectations regarding digital resilience.
Protecting information assets, ensuring operational continuity, maintaining regulatory compliance, and enabling secure digital transformation have become strategic priorities for business leaders and boards alike.
At HACA Partners, we help organizations strengthen their cybersecurity posture, manage technology risks, and build resilient digital environments capable of supporting long-term business objectives. Our approach combines governance, risk management, cybersecurity expertise, regulatory knowledge, and operational experience to provide practical and effective solutions tailored to each organization’s needs.
Whether supporting cybersecurity transformation initiatives, implementing governance frameworks, conducting independent assessments, or strengthening operational resilience, we help organizations navigate an increasingly complex technology landscape with confidence.
AI-Driven Cybersecurity
We help organizations leverage AI technologies to strengthen their security posture through:
• AI-powered threat detection and monitoring
• Security event analysis and prioritization
• Automated incident response capabilities
• Threat intelligence enhancement
• Risk monitoring and predictive analytics
• Security operations optimization
• AI governance for cybersecurity applications
By combining cybersecurity expertise with advanced analytics and AI capabilities, we help organizations identify threats earlier and respond more effectively.
Recurring Security & Governance Services
We provide flexible leadership and advisory services including:
• Virtual Chief Information Security Officer (vCISO)
• Data Protection Officer (DPO) services
• DORA compliance support and advisory
• Information security governance
• Cyber risk management oversight
• Security program management
• Continuous improvement initiatives
Our recurring services provide access to experienced professionals without the need for permanent internal resources, enabling organizations to strengthen their security maturity in a cost-effective manner.
Cybersecurity Architecture
We support organizations in designing and implementing cybersecurity frameworks aligned with business objectives and technology transformation initiatives.
Our services include:
• Cybersecurity architecture assessments
• Security-by-design implementation
• Network and infrastructure security architecture
• Cloud security architecture
• Identity and access management frameworks
• Security controls design and implementation
• Security architecture governance
Our objective is to ensure that security is embedded into the organization’s technology landscape from the outset rather than added as an afterthought.
Independent Security Testing & Assessments
Our expertise includes:
• Ethical penetration testing
• Vulnerability assessments
• Security maturity assessments
• Red team and scenario-based testing
• Security control effectiveness reviews
• NIST Cybersecurity Framework assessments
• ISO 27001 and ISO 27002 alignment reviews
• Third-party security assessments
We provide objective evaluations and actionable recommendations that help organizations strengthen their cybersecurity posture and reduce risk exposure.
Business Continuity, Disaster Recovery & Crisis Management
Our support includes:
• Business Continuity Plan (BCP) reviews and development
• Disaster Recovery (DR) assessments and planning
• Business Impact Analysis (BIA)
• Operational resilience assessments
• Crisis management framework design
• Incident response planning
• Tabletop exercises and simulation testing
• Crisis management training and awareness
We help organizations improve preparedness, minimize disruption, and recover more effectively when incidents occur.
Regulatory Compliance & Gap Assessments
We help organizations assess compliance readiness, identify gaps, and implement remediation initiatives.
Our expertise covers:
• DORA compliance assessments
• NIS2 readiness reviews
• FIDA assessments
• PSD2 compliance support
• GDPR compliance reviews
• Information security governance assessments
• Control framework reviews
• SOC reporting support
• Regulatory remediation programs
Our objective is to help organizations establish sustainable compliance capabilities while strengthening overall risk management effectiveness.
The Edge We Bring
-
Governance, Risk and Cybersecurity Integration
We believe cybersecurity should be managed as a business risk rather than solely a technology issue. Our approach integrates governance, risk management, compliance, and cybersecurity into a cohesive framework.
-
Deep Regulatory Expertise
Our experience in highly regulated industries enables us to support organizations facing increasingly complex requirements related to DORA, NIS2, GDPR, PSD2, FIDA, operational resilience, and information security.
-
Business-Focused Cybersecurity
We align cybersecurity initiatives with strategic objectives, operational requirements, and business priorities to ensure that security investments deliver measurable value.
-
Independent and Objective Perspective
As an independent advisory partner, we provide unbiased assessments and recommendations focused exclusively on our clients’ interests and risk profile.
-
Strong Operational Resilience Capabilities
Beyond cybersecurity, we help organizations strengthen continuity, crisis management, disaster recovery, and operational resilience capabilities to ensure sustainable business operations.
-
Expertise Across Emerging Technologies
Our combined expertise in cybersecurity, data governance, artificial intelligence, and digital transformation enables us to address evolving technology risks and opportunities holistically.
-
Trusted Partner for Digital Resilience
From strategic governance and regulatory compliance to security testing and operational resilience, we help organizations build secure, compliant, and resilient digital environments capable of supporting long-term growth. At HACA Partners, we help organizations protect their critical assets, manage evolving technology risks, and confidently embrace digital transformation.
OUR TEAM
Geoffrey Barré
Geoffrey is Réviseur d’Entreprises in Luxembourg and gained extensive knowledge of the asset management industry through an experience of 10 years within PWC Luxembourg, performing external audit of UCITS, Alternative Funds and Management Companies.
During the last 5 years, Geoffrey completed his expertise of the Financial Sector within the Commission de Surveillance du Secteur Financier (CSSF) by carrying on-site inspections and became specialized in ESG by leading the ESG Thematic On-Site Inspection of some of the largest asset managers in Luxembourg and in contributing to the CSSF ESG Task Force.
Geoffrey holds the CFA certificate in ESG Investing.
Dario Zambotti
Dario is Réviseur d’Entreprises in Luxembourg and approved auditor in UK and Ireland, he gained extensive knowledge of the asset management industry through an experience of 18 years within Deloitte Luxembourg and KPMG Ireland.
He has been performing external audit of UCITS, AIF, SPVs and Management Companies and has been developing the sustainability assurance practice.
Samuel Clerc
Member of the LVPA and ALRIM, Samuel brings nearly 20 years of professional experience, supporting financial services firms and corporations in Luxembourg and internationally. His focus spans investment funds, management companies, and SMEs, enabling robust client solutions in risk management and corporate finance.
Samuel has cultivated a strong track record in the financial services sector, expertly assisting clients with risk & operational risk management overview, valuation, M&A, and CFO advisory services. He has also successfully executed over 20 private equity transactions across direct investments and fund of funds structures.
François Barret
François has more than 20 years of experience in the financial services industry (Banks, PSFs, Asset Management).
He built a solid expertise in Cyber Security, Data Privacy by being the Chief Information Security Officer, Business Continuity Manager and Data Protection Officer for a Private Bank, Asset Management and Insurance Company, and its European branches for the last 5 years.
François also spent several years in a Big 4 Consulting firms by leading Cyber Security and Data privacy assignments in Luxembourg and abroad for prestigious well-known financial services clients (Banks, PSFs and Asset Management companies).
Sébastien Demade
Sébastien brings over 12 years of professional experience in corporate finance, private equity, and investment analysis, supporting SMEs and growth companies in France and internationally. His expertise spans deal sourcing, financial due diligence, legal structuring, and governance across the investment lifecycle.
He has cultivated a strong track record in private equity and venture capital, expertly assisting clients with opportunity assessment, financial modeling, valuation, and negotiation. He has also successfully executed and monitored numerous investment transactions across private equity, private debt, real estate, and venture capital.
Clarisse Ivañez-Biessy
Clarisse has more than 5 years of experience in the audit and consultancy services. She gained experience on internal and external audits working mostly on Investment Funds (UCITS and AIFs) and other financial market participants.
In addition, she obtained ESG (Environment, Social, Governance) expertise through her curriculum at the EFFAS alongside with the INDR CSR training. Hence, she is certified ESG analyst (CESGA®) and CSR expert.
She is an active member PRO RSE association (Luxembourg Association for CSR Professionals), Luxembourg Private Equity Association (LPEA) and Société Française des Analystes Financiers (SFAF).
Meryl Mettoudi
Meryl has 4 years of professional experience serving financial services firms in Luxembourg, mainly alternatives funds.
Meryl built a robust experience in auditing and supporting valuation service for a “Big Four” firm in Luxembourg.
Meryl is a Senior Consultant at HACA Partners and is mainly involved in valuation and modelling service.
Aïda Wifaq
Aïda has 9 years of professional experience serving banks and insurance services firms in Paris.
Aïda built a robust experience in GRC (Governance, Risk, Compliance) for major insurance companies and banks in France. She also had the opportunity to implement a cybersecurity framework in private banking and wealth management in France.
Nadane Chanemougame
Project Manager, Nadane has 7 years of professional experience serving financial services firms in Luxembourg, mainly banks, management companies and insurance companies.
Nadane built a robust experience in consulting and handling transversal projects in various fields (digital, compliance, TOM, process optimisation, change management…) in Luxembourg. He also had the opportunity to practice business development for the different consulting companies he worked for in Luxembourg.
Nadane is Manager at HACA Partners and is mainly involved in Consulting engagements.
Dario is Réviseur d’Entreprises in Luxembourg and approved auditor in UK and Ireland, he gained extensive knowledge of the asset management industry through an experience of 18 years within Deloitte Luxembourg and KPMG Ireland. He has been performing external audit of UCITS, AIF, SPVs and Management Companies and has been developing the sustainability assurance practice.
Dario Zambotti
Dario is Réviseur d’Entreprises in Luxembourg and approved auditor in UK and Ireland, he gained extensive knowledge of the asset management industry through an experience of 18 years within Deloitte Luxembourg and KPMG Ireland.
He has been performing external audit of UCITS, AIF, SPVs and Management Companies and has been developing the sustainability assurance practice.
Member of the LVPA and ALRIM, Samuel brings nearly 20 years of professional experience, supporting financial services firms and corporations in Luxembourg and internationally. His focus spans investment funds, management companies, and SMEs, enabling robust client solutions in risk management and corporate finance. Samuel has cultivated a strong track record in the financial services sector, expertly assisting clients with risk & operational risk management overview, valuation, M&A, and ...More
Samuel Clerc
Member of the LVPA and ALRIM, Samuel brings nearly 20 years of professional experience, supporting financial services firms and corporations in Luxembourg and internationally. His focus spans investment funds, management companies, and SMEs, enabling robust client solutions in risk management and corporate finance.
Samuel has cultivated a strong track record in the financial services sector, expertly assisting clients with risk & operational risk management overview, valuation, M&A, and CFO advisory services. He has also successfully executed over 20 private equity transactions across direct investments and fund of funds structures.
Aïda has 9 years of professional experience serving banks and insurance services firms in Paris. Aïda built a robust experience in GRC (Governance, Risk, Compliance) for major insurance companies and banks in France. She also had the opportunity to implement a cybersecurity framework in private banking and wealth management in France.
Aïda Wifaq
Aïda has 9 years of professional experience serving banks and insurance services firms in Paris.
Aïda built a robust experience in GRC (Governance, Risk, Compliance) for major insurance companies and banks in France. She also had the opportunity to implement a cybersecurity framework in private banking and wealth management in France.
Meryl has 4 years of professional experience serving financial services firms in Luxembourg, mainly alternatives funds. Meryl built a robust experience in auditing and supporting valuation service for a “Big Four” firm in Luxembourg. Meryl is a Senior Consultant at HACA Partners and is mainly involved in valuation and modelling service.
Meryl Mettoudi
Meryl has 4 years of professional experience serving financial services firms in Luxembourg, mainly alternatives funds.
Meryl built a robust experience in auditing and supporting valuation service for a “Big Four” firm in Luxembourg.
Meryl is a Senior Consultant at HACA Partners and is mainly involved in valuation and modelling service.
Project Manager, Nadane has 7 years of professional experience serving financial services firms in Luxembourg, mainly banks, management companies and insurance companies. Nadane built a robust experience in consulting and handling transversal projects in various fields (digital, compliance, TOM, process optimisation, change management…) in Luxembourg. He also had the opportunity to practice business development for the different consulting companies he worked for in Luxembourg. Nadane is Manager...More
Nadane Chanemougame
Project Manager, Nadane has 7 years of professional experience serving financial services firms in Luxembourg, mainly banks, management companies and insurance companies.
Nadane built a robust experience in consulting and handling transversal projects in various fields (digital, compliance, TOM, process optimisation, change management…) in Luxembourg. He also had the opportunity to practice business development for the different consulting companies he worked for in Luxembourg.
Nadane is Manager at HACA Partners and is mainly involved in Consulting engagements.
Clarisse has more than 5 years of experience in the audit and consultancy services. She gained experience on internal and external audits working mostly on Investment Funds (UCITS and AIFs) and other financial market participants. In addition, she obtained ESG (Environment, Social, Governance) expertise through her curriculum at the EFFAS alongside with the INDR CSR training. Hence, she is certified ESG analyst (CESGA®) and CSR expert. She is an active member PRO RSE association (Luxembourg Asso...More
Clarisse Ivañez-Biessy
Clarisse has more than 5 years of experience in the audit and consultancy services. She gained experience on internal and external audits working mostly on Investment Funds (UCITS and AIFs) and other financial market participants.
In addition, she obtained ESG (Environment, Social, Governance) expertise through her curriculum at the EFFAS alongside with the INDR CSR training. Hence, she is certified ESG analyst (CESGA®) and CSR expert.
She is an active member PRO RSE association (Luxembourg Association for CSR Professionals), Luxembourg Private Equity Association (LPEA) and Société Française des Analystes Financiers (SFAF).
Sébastien brings over 12 years of professional experience in corporate finance, private equity, and investment analysis, supporting SMEs and growth companies in France and internationally. His expertise spans deal sourcing, financial due diligence, legal structuring, and governance across the investment lifecycle. He has cultivated a strong track record in private equity and venture capital, expertly assisting clients with opportunity assessment, financial modeling, valuation, and negotiation. H...More
Sébastien Demade
Sébastien brings over 12 years of professional experience in corporate finance, private equity, and investment analysis, supporting SMEs and growth companies in France and internationally. His expertise spans deal sourcing, financial due diligence, legal structuring, and governance across the investment lifecycle.
He has cultivated a strong track record in private equity and venture capital, expertly assisting clients with opportunity assessment, financial modeling, valuation, and negotiation. He has also successfully executed and monitored numerous investment transactions across private equity, private debt, real estate, and venture capital.
François has more than 20 years of experience in the financial services industry (Banks, PSFs, Asset Management). He built a solid expertise in Cyber Security, Data Privacy by being the Chief Information Security Officer, Business Continuity Manager and Data Protection Officer for a Private Bank, Asset Management and Insurance Company, and its European branches for the last 5 years. François also spent several years in a Big 4 Consulting firms by leading Cyber Security and Data privacy assignmen...More
François Barret
François has more than 20 years of experience in the financial services industry (Banks, PSFs, Asset Management).
He built a solid expertise in Cyber Security, Data Privacy by being the Chief Information Security Officer, Business Continuity Manager and Data Protection Officer for a Private Bank, Asset Management and Insurance Company, and its European branches for the last 5 years.
François also spent several years in a Big 4 Consulting firms by leading Cyber Security and Data privacy assignments in Luxembourg and abroad for prestigious well-known financial services clients (Banks, PSFs and Asset Management companies).
Geoffrey is Réviseur d’Entreprises in Luxembourg and gained extensive knowledge of the asset management industry through an experience of 10 years within PWC Luxembourg, performing external audit of UCITS, Alternative Funds and Management Companies. During the last 5 years, Geoffrey completed his expertise of the Financial Sector within the Commission de Surveillance du Secteur Financier (CSSF) by carrying on-site inspections and became specialized in ESG by leading the ESG Thematic On-Site Insp...More
Geoffrey Barré
Geoffrey is Réviseur d’Entreprises in Luxembourg and gained extensive knowledge of the asset management industry through an experience of 10 years within PWC Luxembourg, performing external audit of UCITS, Alternative Funds and Management Companies.
During the last 5 years, Geoffrey completed his expertise of the Financial Sector within the Commission de Surveillance du Secteur Financier (CSSF) by carrying on-site inspections and became specialized in ESG by leading the ESG Thematic On-Site Inspection of some of the largest asset managers in Luxembourg and in contributing to the CSSF ESG Task Force.
Geoffrey holds the CFA certificate in ESG Investing.


