Head of Compliance

Anaïs Roux

Leads compliance engagements. Translates regulation into work an engineering team can actually schedule.

AR

Background

Anaïs Roux runs Norva’s regulatory practice, covering NIS2, ISO 27001 and DORA. She joined in 2019 from a certification body, where she audited information security management systems for financial and healthcare organisations.

Her position is that a compliance programme fails the moment it becomes a document exercise. Every gap analysis she delivers is scoped against the engineering capacity available to close it.

Archive

Written by Anaïs Roux

NIS2

NIS2: what actually changes for suppliers

Most of the organisations now in scope are not the ones the directive names. They are the suppliers those organisations depend on.