Consultant-CISO

Information Security, Cyber Security, Operational Security, CISO Consultancy and Advisory Services Key areas of expertise include: 🔒 Information Security Reviews and Assessments 🔒 Information Security Strategy Design and Execution 🔒 Enterprise Security Architect - Security Programme development, Cloud, Digital and Social media 🔒 Cloud Security including O365, Azure, AWS 🔒 Information Security Governance, Risk and Compliance – GRC 🔒 ISO 27001, ISMS, NIST and Controls Framework design, implementation and ongoing management. 🔒 Consultant CISO / CISO aaS Interim Information Security Management 🔒 Security Awareness, Training Programme Development / Execution 🔒 Security Documentation: Writing, designing and reviewing security policies and procedures 🔒 Operational Security: Information Asset identification, valuation, threat and vulnerability analysis, risk assessment, countermeasure and controls design, deployment, auditing and continuous monitoring 🔒 Outsourcing, 3rd party and cloud security management and assessment. 🔒 Information Security Incident Management, Table Top Exercises, evidence protection and forensics processes. 🔒 GDPR, Data Privacy and risk exposure reduction 🔒 Standards & Compliance Knowledge: NIST, GDPR, DPA, COBIT, CPNI, Cyber Essentials, SPF, NCSC / NIS, SANS, OWASP, ITAR, EAR, DFARS, NCR, ISO 27001 , ISO 22301, PCI / DSS. 'Consultant-CISO' is a business division and brand of Information Security Advisory Service Ltd