About
Background
Thirteen years as an officer in the Italian Army, in human intelligence (HUMINT) and counterintelligence. Then I built the insider threat function of a large European banking group from the ground up, across its divisions from retail banking to private banking and wealth management: its operating model, detection, investigation and escalation procedures, and casework.
That experience shaped how I work: assess incomplete evidence, make the limits explicit, and carry decisions through to implementation. I now apply it to insider risk management and information protection, from governance to platform configuration and handover.
I also maintain three public resources: Insider Threat and Risk Architecture (INTRA), Insider Threat Event Requirements (ITER), and Insider Risk Atlas, open for use and citation under their stated licenses.
Europe
Programs operating across Europe must account for differences in privacy, employment, and sectoral requirements. A method developed in one jurisdiction cannot be assumed to transfer unchanged to another. I make those requirements part of the program’s scope, controls, and decision procedures. INTRA and ITER record them in the open: the measures a program is built from and what each jurisdiction establishes on them, and the reporting obligations an insider event may trigger.
The thoughts and comments expressed are my own, and nothing on this site describes the internal practice of any organization I have worked for.