Ana Girdner, Cism, Cisa Email & Phone Number

Conroe, Tx, Us

Lysaker, Bærum, No

Responsible for aligning Cognite’s product Security function and services with the requirements and expectations of our customers’, ensuring technical security capabilities and organizational processes aligns with the industries that Cognite serves. Direct support to the Chief Information Security Officer, interfacing directly with key security operations team to help shape and align SaaS offering:• Security Operations team – 24x7 incident monitoring and response• Security Engineering Team – security architecture (vulnerability mgt., penetrating testing• Governance, Risk and Compliance team – risk management, industry certfications (ISO 27000 & 31000, SOC 2 Type 2, NERC CIP, NIST, CSA, etc.)• Infrastructure, Customer Service and Legal team’s – cloud infrastructure design and Security Terms and Conditions

Global CISO responsible for both IT and OT cybersecurity and NERC CIP compliance across 100+ assets in 4 continents. Developed the cybersecurity framework and cyber maturity plan to enhance the company’s security posture and advance preventive and detective capabilities. Conducted an exhaustive technology security evaluation for a security operations managed detection and response provider to upgrade the company’s defensive capabilities.

Us

Senior Innovation Advisor for Digital, Cyber, and I & E, with broad responsibilities for the technical and strategic execution of Sensors, Automation, and Robotics technology portfolios across ExxonMobil. Our team rolled-out and tested the first RobotDog in a production environment to identify use case opportunities across the fleet. Responsible for providing an organization-wide RobotDog to Data Foundation integration strategy with a focus on cybersecurity. Innovation lead for evaluating digital solutions that will enhance the operational effectiveness, safety, and security of ExxonMobil's oil and gas operations worldwide.

Us

Responsible for the continuous monitoring, response and investigation operations of cyber events in the Industrial Control Systems (ICS) environment supporting process operations across Upstream and Midstream locations globally. Stood up the very first cyber operations in the ICS environment geared towards providing "active" defense and detection capabilities for the company. Defined the strategy for continuous monitoring, threat hunting and cyber threat intelligence in the ICS space and implemented two major projects geared at proving the technical feasibility to alert and monitor process events and anomalies in DCS and SCADA platforms, as well as defining the strategy for detecting and alerting high risk "cross border" traffic between the ICS environments and Business networks. Defined the incident response process for the ICS environment and developed the joint incident process between ICS and IT cybersecurity group.

Us

Provided Business Owners with tactical and strategic direction in pursuing high value digital opportunities, prioritizing digital investments and understanding underlying value proposition to help maximize profitability, operational reliability and process safety. Spearheaded the planning and execution of Digital Enablement Platform for Nigeria that unlocked capabilities for automation and remote control of key equipment, conceptualized the end-to-end digital automation of LNG and Gas sales operations of the single largest Helium operations in the company, and developed the proposal for edge computing and LoraWAN solution to bridge the data acquisition and control requirements for unmanned offshore operations in Nigeria. Identified the value proposition and critical need for Remote Access to ICS environments and proposed the technical solution that enabled continuous process support during pandemic. The proposition provided significant dollar savings and efficiencies that prompted the re-evaluation of business support models, especially in Angola.

Ras Laffan, Qa

Head of Industrial Control System Security instrumental in developing the security strategy, and framework for ICS, paving the way for the creation of Qatargas’ ICS Security policy and the initiation of a 5-year corporate initiative in Industrial Control Systems Security. Worked extensively with Qatar government’s Ministry of Information, Communication and Technology providing feedback to Qatar’s national standards to ensure a balanced approach; technically feasible and pragmatic. As a result of the collaboration with the government, Qatargas was recognized for its significant contribution in the development of the country’s first national ICS security standards. Managed the technology security roadmap and security evaluation of new technology solutions, foundational to developing a comprehensive engineering design of an OT Security Operations platform. Worked with Enterprise Risk Management and plant’s Loss Prevention groups to incorporate Layers of Protection process safety hazard analysis and highlight cause and effect of cyber threats and attacks to the company’s safety, health, environmental, financial and reputational impacts. Developed a detailed ICS security Risk Assessment process and tool specifically designed for the ICS environment and relevant threat vectors. Lead a team of engineers providing overall guidance in day-to-day execution of key security tasks and project support. Developed system security specifications and requirements for project execution. Stewarded the company’s cyber security initiative to key Stakeholders and Executive Committee members (COO’s) providing a state of the company’s risk profile and mitigation measures.

Us

Instrumental in conceptualizing and building the global program and global implementation strategy for ExxonMobil Production Company's process control security. Board member to the US Department of Homeland Security Industrial Control Systems Joint Working Group in the Vendor sub-group. ExxonMobil Production Company control systems security advisor providing insight to the Business Roundtable Information Technology Initiative in response to the White House Administration's proposed legislation on cyber security. Lead a network of cyber security advisors across 200 of ExxonMobil Production Company's production operations. Global Custodian for ExxonMobil Upstream division's component of Industrial Control System Requirements, which is ExxonMobil's industrial control systems cyber security standards. Developed a Risk Assessment strategy and tool specific for Industrial Control Systems that highlight key cyber risks for process operations. Worked with various vendors to enhance security features and raise awareness on remote connectivity issues. Collaborated with turbine vendors to develop a purpose built network interface design for remote monitoring and diagnostics that lead to the introduction of new industrial purpose built firewalls in the industry: S3C and ROC firewalls. Areas of responsibilities include the following countries: US, Canada East, Canada West, Angola, Nigeria, Equatorial Guinea, Chad, Cameroon, Germany, North Sea, Indonesia, Malaysia, Australia, Papua New Guinea, and Sakhalin. ExxonMobil Production Company's official and key responder from an industrial control systems perspective during the Shamoon infection in the Middle East, interfacing with forensic investigators at ground zero.

Us

Certified Information Security Auditor with emphasis in auditing Process Control infastructures. Developed ExxonMobil Internal Audit process control audit program, rolled out Corporate wide and currently utilized today. Provided training for ExxonMobil IT Auditors and Audit Management in North America, Asia/Pacific and Europe in auditing the Process Control area. First Internal Auditor with actual work background in process control and the first Internal Auditor with two consecutive major findings in the process control arena that brought key attention to Audit Mangement on the "paradigm shift" in this area .

Us

Chairman in charge of information security, controls and governance programs for US field and Mexico based IT area services operations. This area is composed of all IT area services presence within ExxonMobil based in United States and Mexico (Baytown Refinery, Baton Rouge Refinery, Beaumont Refinery, Joliet Refinery, Torrance Refinery, Chalmette Refinery, Billings Refinery, and the entire Mexico area operations). Instrumental in standardizing controls verifications program, audit health checks, and the reporting and stewardship of these areas' state of controls. Staged the first "mock" disaster in the US Field and Mexico IT area services operations where key learnings served the basis for many changes incorporated in the organization's security and controls process: key control verification, controls stewardship, audit and governance.

Us

Managed West Cost Area networking and telecommunications operations and support lifecycle management. Provided day-to-day operational guidance and change management coordination.

Us

Torrance Refinery Local Control Network systems engineer responsible for five separate DCS local control networks' day-to-day system maintenance and administration, strategic planning and expansion. Key interface to refinery project and and field instrumentation groups integrating systems and sub-systems with Honeywell DCS. Piloted the first Emergency Notification System using Quantum Eagle 2000 technology in ExxonMobil. Performed a flawless "live" cutover of a major local control network with zero incidents, which took 8 solid months of research and preparation in cutting-over approximately 200+ live process tags and over 100 application module control algorithms and command language. Wrote many command language programs that triggers pre-alarm conditions and initiated logic commands.

Arlington, Virginia, Us

Criminal Investigation Division senior analyst to the Adjutant General cataloging and documenting criminal investigation cases. Logistics non-commissioned officer in-charge of troop movement and deployment for the Deputy Chief of Staff of Logistics. Managed the Commissioned Officer's performance and evaluation reporting system.

Technical support lead - West Coast Area Service Operations remote and external connections infrastructure.