000° ORIGIN
Turning walls into ha-ha's.
Filip Chyla. Twenty years of business security and leadership - CSO, DevSecOps coach, ISC² instructor.
Book 15 minutes. (opens in a new tab)ISC2 SECURE EUROPE - BUSINESS SECURITY STRATEGY - THE NETHERLANDS
072° PASTURE
The idea
I shepherd organizations to help them understand their cyber risk landscape.
A wall stops the flock from straying. An open horizon keeps the land in view. A ha-ha does both, if you understand the slope, the soil, and the seasons.
Most organizations I am called into have built walls. They go up once, they go up tall, and a year later nobody can see the ground they were meant to protect.
The organizations that endure read the land early, match each boundary to the terrain, and correct course before the ground gives way. That is the work I do.
144° RECORD
Twenty years, in the open
I have run security programs as a CSO and Security Team leader in financial services, retail, fintech and crypto, and built two teams along the way.
€1M+
CLIENT CONTRACTS RETAINED
5
DORA · SOC 2 · PCI‑DSS · ISO 27001 · ISO 42001
2
SECURITY TEAMS BUILT
The work that held up was rarely the framework. An ISAE 3402 Type 2 attestation kept more than a million euros of client contracts in place, because the evidence was already being collected before anyone asked for it.
DORA, SOC 2, PCI-DSS, ISO 27001:2022 and ISO 42001 all had to survive an audit and a business that would not stop moving. Most of the argument in those programmes is about what to leave undone, and I would rather have that argument early than explain it to a regulator later.
WORKED WITH
STATION - PRESENT
HEAD OF INFOSEC
216° STAGE
On stage & in the room
I talk about business security strategy, risk management, cloud-native security, DevSecOps and AI security and governance. More of it happens online now, and I am looking to do more of that.
TALKS
- ONGOING Webinars and info sessionsISC2 · TECHSTRONG EVENTS · ONLINE
- 2025 I need a new set of golfclubs: Why rationality alone is not enoughTEDXKE · THEATER FLINT, AMERSFOORT
- 2025 NIS2: A strategic advantageGOOGLE AMSTERDAM HQ
- 2024 The Show Must Go On: Building Resilient Cloud-Native ApplicationsISC2 SECURE EUROPE · HYATT REGENCY AMSTERDAM
- 2023 Unravelling Cloud-Native Application ChallengesISC2 SECURE LONDON · KINGS PLACE, LONDON
CREDENTIALS
- 2025Cyber Leadership Institute - winning capstone, Cyber Strategy & Transformation
- 2025Cyber Leadership Institute - Cyber Leadership Program
- 2024ISC² Authorized Instructor
- 2022GIAC Strategic Planning, Policy & Leadership (GSTRT)
- 2021Certified Cloud Security Professional (CCSP)
288° CONTACT
Take a bearing
In fifteen minutes we can usually work out whether there is something worth continuing.