Cyber · translation
Plain words, not acronyms
Turns a security briefing full of jargon into the one or two things a board actually has to decide.
A Dossier concept · sample director
Built to brief, not to template
Sofia Marchetti.
Board-ready
Technology & cyber
Canberra · GAICD
Non-Executive Director
She has taken the 2am call.
Two decades leading technology and security, latterly as a chief information security officer. Now on the boards learning that digital risk is theirs to own.
Fig. 01 · the calm in the room
The person who can tell a board which technology risk is real, and which is noise.
Sofia has spent two decades building and defending technology, most recently as chief information security officer of a financial-services group. She has sat on the other side of the incident, the audit and the transformation that ran late.
She joins boards because digital risk is now theirs to carry, and because too few directors can yet ask the second question, the one after the vendor has finished reassuring everyone.
Readiness
What she is genuinely useful for.
Risk · signal
Real exposure, not noise
Sorts genuine risk from the vendor scare story, so a board spends its worry where it actually counts.
Tech · governance
AI and data a board can govern
The resilience, data and AI questions a board now owns, framed so it can govern them rather than nod along.
Crisis · response
Calm is a skill
She has been on the other side of the incident and the audit. In the bad hour, that steadiness is the asset.
“Every board treats cyber as an IT budget line until the morning it is the only thing on the agenda.”
Sofia, on how the conversation changes · a sample perspective
02:00
When it goes wrong, it goes wrong at this hour.
A serious incident does not arrive politely in business hours. It arrives at 2am, and the board's first question is the one nobody rehearsed: what happened, what do we say, and what does it mean by the time the market opens.
Sofia has been the person who answers it. Who decides what to shut down, what to disclose, and what is still unknown at the point a decision cannot wait. A director who has stood in that hour reads a risk report differently, and asks the calmer question sooner.
On the record
Selected experience.
2018 —
Chief Information Security OfficerFinancial-services group
Current
Sample
Non-Executive DirectorFor-purpose board · technology & risk committee
Board
Sample
Advisory BoardCyber-security scale-up
Advisory
Illustrative. Sofia is a fictional director created to show the work; a real Dossier is written from your actual record.
Plain reads on the risk a board cannot yet see.
A short, regular view on cyber, data and the technology questions a board now owns, written with her and published here, so a committee reads how she thinks under pressure, not just her title.
Sofia Marchetti
Happy to talk, plainly.
On her own domain · Canberra · GAICD
From Dossier
One director. One identity. Never a template.
This is a sample, written and designed around one person: how Sofia thinks, and how a board should read her. Yours would be built the same way, from your own record and in your own voice, and quietly kept current as your search moves. We do the work. You approve; we manage.
Book a 20-minute introduction →
or see the studio at dossier.house
Dossier · a considered web presence for non-executive directors · dossier.house
Scrye Labs Pty Ltd, Sydney · Sofia Marchetti is a fictional director created to demonstrate the work.
Scrye Labs Pty Ltd, Sydney · Sofia Marchetti is a fictional director created to demonstrate the work.