Skip to content

Organisation Chart & Reporting Lines

Purpose. The current organisation chart with the security owner marked, as at its approval date. It is the picture of ISMS-DOC-05-2, which holds the full roles, responsibilities and RACI. When the two disagree, 05-2 wins and this chart is redrawn.

Chart

General Meeting of Shareholders Olaf Jacobson · Thomas Picauly · Alessandro Cardinali · Melvin Jacobson Top management — the three operating founders (directors, DGA) Olaf Jacobson — CEO Commercial, strategy, external representation infrastructure ★ Information Security Manager Thomas Picauly — CTO Engineering, infrastructure, availability, change Technical security lead Alessandro Cardinali — CPO Product and design; operations (administration, people) Finance, HR records Andrea Cardinali — CyberSquad (external) Security consultant and internal auditor Advises the ISM; may escalate to top management Melvin Jacobson — co-founder, shareholder No operating role, directorship or salary Emergency backup access only; reviewed quarterly

★ marks the security owner. Dashed lines are advisory, not management lines.

Reporting lines

Person Role Reports to Security responsibility
Olaf Jacobson CEO; Information Security Manager Top management (as one of its three members) and the shareholders Owns the ISMS, approves policies, runs the audit relationship
Thomas Picauly CTO Top management (member) Technical security lead: AWS, GitHub, network, application security
Alessandro Cardinali CPO Top management (member) Owner of finance and HR records; evidence capture and vendor paperwork
Melvin Jacobson Co-founder, shareholder Shareholders' meeting None; emergency backup access, reviewed with everyone else's
Andrea Cardinali (CyberSquad) External consultant, internal auditor Advises the ISM; escalates audit concerns directly to top management Independent internal audit (related party, disclosed in ISMS-DOC-05-2 §1.7)

Soon has no employees beyond the founders. Contractors, when engaged, report to the founder who commissioned the work and are screened and contracted under the HR Security Policy.

Change log

Version Date Author Change
0.1 2026-10-13 ISMS First version as an approved, dated document, for checklist row 8 (CC1.3). The auditor's spot check asked for a timestamp, and the earlier screenshots carried none. Drawn from ISMS-DOC-05-2 v0.3.