Christophe Mazzola

In the seat, not on the shelf

I'm the CISO at Mobilexpense, Head of CRA + AI Governance at Cresco Cybersecurity, and a PECB Certified Trainer. Three operational seats that keep me close to the work — NIS 2 governance reviews, ISO 27001 implementation, DORA mappings, AI Act readiness — the same work my students are facing on Monday morning.

The receipts

Twenty-one certifications across ISO 27001/27002/27005, the deeper ISO 270xx family (27033, 27034, 27035), ISO 31000 and 42001, NIS 2 and DORA, SOC 2 and NIST. ISACA CISM, PECB Certified CISO, IPC Management Systems Auditor. PECB Gold Certified Trainer. The certifications keep me current; they don't replace the work. They're the receipts that I've been through what I teach.

Why Cyber Academy

I founded Cyber Academy because the European GRC training market was split between expensive theory from consultancies that don't apply what they teach, and content farms with no skin in the game. I wanted a middle — a school run by a practicing CISO, with prices on the page, an honest "not for you" warning on every course, and a refund if you don't pass the exam.

The book

I'm the author of "Être en Cybersécurité" (éditions Spinelle). Not a professional manual — a book written for everyday people to take the fog off cybersecurity. Practical, French-first, accessible.

Speaking & writing

Regular speaker and panelist at ISACA, PECB, TEDx, AFASG and Les Engagés Belgique. Writer and blogger for both professionals and the general public — same goal: take the fog off the field.