ISO 27001 ISMS between the Reality and the Myth

Mr Tony Chebli is heading the Information Security Department at Credit Libanais since September 2008. He hold the following certifications: CISSP (since 2001), PECB Certified Management Systems Auditor (CMSA), PECB Certified Data Protection Officer (GDPR), PECB ISO 27001 Lead Auditor, PECB ISO 27005 Risk Manager, PECB ISO 27032 Lead Cybersecurity Manager, PECB certified trainer, Other technical certifications.

Tony received for third consecutive years the security award “CISO-100” (Chief Information Security Officer among top 100 in the region) from the Middle East Security Awards (MESA) in Dubai UAE.

Tony conducted numerous security trainings for professional in Levant and Gulf region consisting of ISO 27001 Lead auditor, ISO 27005 Risk Manager and CISSP courses.
Tony has been featured as a key note speaker at different conferences “PCI counsel” and ISC2 security summit in Dubai and was hosted at a local Radio several times to raise security awareness for the community.

He achieved PCI-DSS compliance, for Credit Libanais (first and still only Bank to be certified PIC-DSS), Netcommerce (ecommerce site), IPN (service provider), CCM (service provider) and Credit International Bank in Senegal.

He designed a security program based on ISO 27001 and PCI-DSS standards for Group Credit Libanais, which assisted the Group to satisfy Central Banks circulars and requirements in various countries in addition to the external/ internal IT auditors’ requirements.

Tony performed numerous information security services being part Deloitte and Secor/Computel group, in the Middle East region (UAE, Lebanon, Jordan, Turkey, and KSA).

He had the opportunity to be involved with many companies including Banking, Finance, Government Agencies and private companies.

His experience in the field is extensive has led him to perform the following: Providing consultancy for ISO 27001 certifications, Performing risk assessments based on ISO 27001, Developing Security policies and procedures, Performing security awareness for end-users, Conducting security trainings for professional, Security audits and many more.