Alexander Kuznetsov

Responsibilities Development of measures for fraud prevention and detection in Bank information systems Incident response and investigation Technical information security controls Evaluation of oprisk controls in business information systems and related business processes Vulnerability management Participation as risk expert in projects Accomplishments: Developed and implemented response procedures for online-banking fraud incidents Developed and implemented controls for internal fraud detection

* Successfully led several Group-wide information security projects (16 countries) * Negotiated Group-wide contracts with leading information security vendors * Researched and developed standards for new ISM/Fraud prevention/Risk Management topics, such as Voice Biometrics, Advanced Persistent Threats protection, ATM/POS security etc. * Supported and developed Group ISM methodology, including update of Group-wide policies and implementation of ISM processes in automated solution

• Assure compliance with corporate Information Security policies, baselines, standards, procedures in Hub and respective regional branches; • Administer the technical security countermeasures program for all Informational systems; • Identify security violations, implement relevant corrective and preventive action; •Network and telecommunication security program; • Information Security awareness program; • Coordinate a disaster recovery and contingency planning program;

Responsibilities: Security policy development and enforcement Information risk analysis Security training and awareness Threat and Vulnerability Management Choosing, implementing and managing security solutions. Security incident response Interaction with law enforcement authorities Accomplishments: Development of high level security policies Informational assets classification Development of functional policies and supporting elements: procedures, standards.

Responsibilities: • Development of fraud prevention policies and procedures • Development and management of Fraud Management System • Analysis of new services and marketing initiatives • Incident response • Development and implementation of Physical access controls Accomplishments: • Developed and implemented administrative fraud prevention controls for organization • Developed and implemented physical access control policies and procedures • Investigated multiple incidents

Responsibility spheres: • Development and management of Fraud Management System • Analysis of new services and marketing initiatives • Fraud and information security incident response • Interaction with law enforcement authorities Accomplishments: • Developed from scratch custom FMS for organization • Developed and implemented administrative fraud prevention controls for organization • Investigated multiple fraud and information security incidents

5.5-year full-time study degree (w. honours) qualification: mathematician specialization: computer security 9,180 academic hours in total