FEDERICA BERTONIAI Risk · Cyber Intelligence · Digital Evidence Review

From threat to decision

Strategic Cyber Threat Intelligence, cyber geopolitics, and AI Risk for boards and organizations making decisions in complex, dynamic, and highly uncertain environments.

WHO WE WORK WITH

Different expertise.
One shared need:
decisions grounded in verifiable information.

Federica Bertoni’s practice works with organizations, businesses, and professionals when digital evidence, cyber threats, AI risk, or geopolitical conditions make a decision technically complex. Engagements may take the form of an assessment, independent review, second opinion, evidence strategy, investigation plan, intelligence brief, specialist dossier, or ongoing support.
The starting point is the question that needs to be resolved: what needs to be verified, using which method, what technical work must be performed, what viable alternatives exist, which decision needs support, and what deliverable will provide that support in a documented, defensible way.
Professionals gathered around a table with documents and analytical tools.
Analysis of documents and sources at a research desk.

Advisory firms, analysts, and research centers

We integrate cyber analysis into geopolitical, industrial, financial, and risk advisory engagements, with specialist support available on request. We analyze actors, state-linked campaigns, and sector exposures, evaluating OSINT sources and attribution hypotheses. We provide research memos, dossiers, assessments, and warning indicators that identify verifiable sources, alternative hypotheses, information gaps, and confidence levels, supplementing strategic analysis and informing decisions. Contributions may be credited, coauthored, or confidential.

Banks, financial intermediaries, and regulated organizations

We support management and legal, control, and security functions in responding to incidents, internal investigations, whistleblowing, insider threats, and data leaks. We assess readiness to collect evidence from cloud and SaaS environments, the exposure of critical infrastructure and suppliers, state-sponsored threats, and cyber-geopolitical risks. We provide investigation and preservation plans, assessments, warning indicators, and executive briefs to reconstruct events and inform organizational risk decisions, explicitly identifying sources, hypotheses, gaps, and confidence levels.

Professionals, entrepreneurs, and senior executives

When fraud, including fraud involving business email, compromised accounts, false identities, synthetic content, information leaks, or disputes with associates create financial, legal, or reputational exposure, we assess the evidence and the cyber and AI risks. For individuals with greater exposure, including internationally, we analyze the risk of targeted attacks and spyware. We provide a rapid assessment, an evidence review, and a preservation and verification plan to support proportionate action, distinguishing concrete indicators from suspicions that require clarification.

Accountants, auditors, and business advisors

When fraud, false identities, compromised accounts, document anomalies, or internal reports affect corporate governance, controls, and processes, we assess the digital dimension and the cyber and AI risks, including AI use outside corporate controls. We identify what to preserve and a verification process proportionate to the situation. We provide preliminary assessments, risk memos, timelines, evidence plans, and plans for further examination to support documented decisions alongside tax, accounting, and corporate advisory work.

Attorneys and law firms

When a litigation decision depends on disputed data, accounts, or content, we reassess digital evidence, expert reports, and technical opinions. We evaluate provenance, authenticity, and evidentiary value, distinguishing data, inferences, consistency with possible explanations, and attribution. We define preservation priorities and technical questions. We provide independent technical opinions, evidence maps, and timelines to build an evidence strategy on verifiable grounds, with specialist oversight and, where needed, forensic work coordinated with laboratories.

Digital forensics consultants

When technical findings call for a broader reconstruction or an independent review, we help consultants and laboratories frame the case. We integrate OSINT, source verification, cyber intelligence, and AI risk, examining competing hypotheses, gaps, and the evidentiary significance of the data. We provide evidence maps, timelines, questions, and specialist contributions to reports, with documented sources and reasoning. Collaboration may be credited, coauthored, or confidential, depending on the role and professional obligations involved.

ENGAGEMENT OPTIONS

Every engagement starts with a question

An engagement may arise from an urgent case, the need for a second opinion, a business decision, an area of cyber-geopolitical exposure or a request for a specialist contribution within a broader project.
For your initial inquiry, simply indicate:
  • the issue;
  • the decision to be supported;
  • who will use the work;
  • the materials or sources available;
  • any deadline.
Following an initial assessment, we define the scope, deliverables, timeline, working arrangements, and fee.
A workstation prepared for writing a professional message.

You stay in control

Your preferences

The site does not include advertising, browsing analytics, or profiling. You can choose whether to remember your accessibility settings for subsequent pages and visits.

Technical functions

Always necessary

Once you make a choice, the browser stores it for 6 months so it can be respected without displaying the notice on every page. This record contains no personal identifiers and is not sent to the site.

Stores text size, contrast, link underlining, and reduced motion settings on your device. Settings are not sent to the Data Controller or to third parties. Without this option, you can adjust them on the current page.

These settings expire when your choice expires: no later than 6 months. If you reject or disable this option, saved settings are deleted; active settings remain available on the current page.

This choice does not authorize future tools or services. For full details, including any technical security tools used by the hosting provider, read the cookie and preferences policy.