Research & Standards

Research, teaching and international standards

Research in AI, cybersecurity and privacy — alongside 5 cyber ISO standards and 12 teaching appointments across 5 institutions.

Overview

How the work connects

Research and practice feed each other here. Lucas’ published work covers AI, cybersecurity and privacy — carried out at Carnegie Mellon’s CyLab and Software Engineering Institute, and at the University of Buenos Aires.

The same work runs outward into international standards. He has co-authored 5 cyber ISO standards, has served since 2020 as ISO National Expert on ISO/IEC JTC 1/SC 27 — the international subcommittee for information security, cybersecurity and privacy protection — and was National Secretary of Argentina's mirror subcommittee from 2021 to 2023.

He has taught the subject across 4 universities and trained Boards of Directors, C-suite executives, managers, staff, police forces, professionals and students worldwide.

Lucas Falivene presenting on the EU Digital Operational Resilience Act
Presenting on the Digital Operational Resilience Act (DORA) — governance, ICT risk management, incident reporting, resilience testing and third-party risk.
Research

Publications

Full text for most of these is available through ResearchGate.

Unlocking EU Cyber Compliance: A Combined Maturity Model for EU Cyber Regulations

A single maturity model spanning the overlapping EU cyber regimes.
Working publication
Expected 2026

Understanding the Privacy Awareness Gap

Master thesis, graded A+. Advisor: Prof. Alessandro Acquisti.
Carnegie Mellon University
May 2021

Data Deletion and Cookie Control

Human-subjects research.
Carnegie Mellon University
May 2021

Unifying Cyber Risk: Cyber Risk Maturity Model v1

With Brett Tucker.
Carnegie Mellon University
Dec 2020

Understanding Privacy Awareness Gap

Research paper preceding the thesis.
Carnegie Mellon University
Oct 2020

Unifying Cybersecurity: Information Security Unified Framework v2

Master thesis, awarded distinction. With Raúl Saroka. Published in Spanish.
University of Buenos Aires
Jul 2019

Unifying Cybersecurity: Information Security Unified Framework v1

With Juan Pedro Hecht. Published in Spanish.
University of Buenos Aires
Mar 2018
All publications on ResearchGate
Positions

Research positions

Research Assistant — CyLab

Predicting large malware outbreaks, and understanding credential stuffing.
Carnegie Mellon University
Apr — Aug 2020

Cyber Risk Consultant — CERT / SEI

A novel cyber risk method using NIST, FAIR, MITRE, OCTAVE and CMMC, allowing CISOs to justify budget to the Board.
Carnegie Mellon University
Jan — May 2021
Teaching

Teaching and lecturing

12 appointments across 5 institutions, listed course by course.

Principal Lecturer — Research Methodologies & Project Management

Spring 2024.
University of Wolverhampton & STC Higher Education
2024

Principal Lecturer — Information Assurance

Fall 2022, Fall 2023  ·  MSc in cybersecurity.
University of Wolverhampton & STC Higher Education
2022 — 2023

Principal Lecturer — Introduction to Information Security Management

Fall 2022, Fall 2023  ·  Post-graduate course.
Buenos Aires Institute of Technology (ITBA)
2022 — 2023

Lecturer — Introduction to Information Security

Fall 2023.
Buenos Aires Institute of Technology (ITBA)
2023

Teaching Assistant — Privacy in the Digital Age

Spring 2021.
Carnegie Mellon University
2021

Teaching Assistant — Information Security Risk Management

Spring 2021, Mini 3 and Mini 4.
Carnegie Mellon University
2021

Teaching Assistant — Statistical Reasoning with R

Fall 2020.
Carnegie Mellon University
2020

Teaching Assistant — Information Security Management

Spring 2019.
University of Buenos Aires
2019

Assistant Lecturer — Network Security

Fall 2018, Spring 2019.
University of Buenos Aires
2018 — 2019

Assistant Lecturer — Business process analysis and modelling

Fall 2018, Spring 2019.
Buenos Aires Institute of Technology (ITBA)
2018 — 2019

Cybersecurity & Cybercrime Lecturer

400+ federal and state police agents and ministry staff trained across 10+ courses and 75+ lectures.
Ministry of National Security, Argentina
2016 — 2019

Teaching Assistant — Introduction to General Informatics

Fall 2012.
Buenos Aires Institute of Technology (ITBA)
2012
Speaking

Speaking

Understanding the Privacy Awareness Gap

Speaker  ·  Educational Event, Malta Chapter.
ISACA
2023

Using ISO 27032 to counter Generative AI cyber risks

Speaker  ·  Impact of GenAI on Cybersecurity — how can ISO 27032 help?
PECB
2023

Quick sneak peek on DORA's requirements

Speaker  ·  Impact of DORA for insurer companies.
PwC Malta
2023

ECI & RA: Express Control Impact and Risk Analysis

Speaker  ·  FloCon 2022 conference.
Carnegie Mellon SEI / CERT
2022

Risk management good practices

Speaker  ·  How will DORA impact ICT risk management? — webinar.
PwC Malta
2022

Third-party risk management maturity model, metrics and reporting

Speaker  ·  How will DORA impact ICT third-party risk management (TPRM)? — webinar.
PwC Malta
2022

Information Security Strategic Management I

Guest lecturer  ·  Information Security Master.
University of Buenos Aires
2022

The state of cybersecurity in the XXI century

Speaker  ·  Software engineering fair — webinar and seminar.
Francisco de Paula Santander University
2022

Deep & Dark web 101

Guest lecturer  ·  School of Engineering.
University of Buenos Aires
2018

Cybercrime, OSINT and dark web

Guest lecturer  ·  Presidential security unit, Quinta de Olivos.
Argentine Federal Police
2017

Lecturer — Argentine National Gendarmerie

Federal police force.
Argentina
2016 — 2017
Speaking enquiries
Standards

Standards co-authored

ISO/IRAM 27001

Information security management systems — requirements.
Co-author
2021

ISO/IRAM 27002

Information security controls.
Co-author
2021

ISO/IRAM 27003

Information security management systems — guidance.
Co-author
2022

ISO/IRAM 27018

Protection of personally identifiable information in public clouds.
Co-author
2023

Also contributed to the development of national standards ISO/IRAM 27005 and 27103.

Committees

Committee roles

ISO National Expert — several countries

Shaping and voting on the publication of new ISO international standards.
ISO/IEC JTC 1/SC 27
Apr 2020 — Present

National Secretary

Argentina's information security, cybersecurity and privacy protection subcommittee.
IRAM mirror subcommittee
Mar 2021 — Aug 2023

Representative of the University of Buenos Aires

Standing representation on the national mirror subcommittee.
IRAM mirror subcommittee
Dec 2018 — Present

Let's connect

For speaking engagements, professional networking, research collaboration, or a conversation about AI, cyber and privacy.

Speaker request Connect on LinkedIn