Matt Gibson, P.E., Cissp Email & Phone Number

Charlotte,Nc

I currently provide thought leadership and direction for the EPRI Nuclear Digital I&C and Cyber Security R&D portfolio. These R&D portfolios seek to integrate various related disciplines to discover and develop processes and technologies that will drive higher efficiencies and cost savings within the industry. All while maintaining the high safety standards that are expected. The current R&D focus includes:-Leveraging qualitative hazard analysis and risk methods in the design of digital I&C systems. This R&D seeks to establish actionable methods that can provide a meaningful measure of system and software reliability including software common cause failure combined with plant level consequence to achieve risk-informed technology deployments.- Reducing the cost of nuclear I&C systems by identifying and mitigating the low-value technical cost drivers in platform selection, application design, installation, and life cycle support. This will be achieved using an Integrated Digital Engineering methodology using Systems Engineering standards and methods. - Integrating efficient cyber security assessment and vulnerability mitigation methods into the digital systems design and implementation process. This focus area includes the dual use of “cyber” tools to dive high system functional reliability and quality. - Development of alternate chip level architectures that provide hardware driven determinism and formal verifiability.

Charlotte, North Carolina Area

Provided technical leadership and project management for EPRI research focus areas in the areas of Cyber Security, Digital I&C, and Human Factors Engineering.Created, developed, and lead research projects in the areas of: • Digital I&C network design and configuration• Cyber security program and technical controls implementation, cyber threat assessment, and mitigation, Digital I&C systems integration, requirements and specification development• Qualitative hazard analysis methods • Nuclear cyber security incident response scenarios- Architected and deployed the EPRI Digital I&C Lab which is currently being utilized for several projects.- Lead collaboration initiatives with the national labs and DOE.

Raleigh-Durham, North Carolina Area

In this role, provided solution consulting, project and program development leadership, and system architecture design for various digital I&C projects and programs including multiphase Fleet Distributed Control System (DCS)implementations (Honeywell PKS), New Build Nuclear(AP1000), Turbine Controls Systems (Triconex),Fleet Cyber Security Plan and Program Development (10CFR73.54),Software Quality Assurance (SQA) Plan implementation and execution. Experience included implementation of cyber security, digital I&C, and human factors technologies and processes. Lead the multi-utility AP1000 NuStart I&C, HFE, and Cyber Security Engineering Team for 4 + years as a full time assignment. Provided significant leadership interfacing with Westinghouse on Digital I&C and Cyber Security design and implementation requirements for the Ovation, Common Q, Security, and Telecommunications Systems .Had direct interface with NRC Staff and ACRS including invited testimony. Leading contributor to the successful licensing of the Westinghouse AP1000 DCD and Reference COLs as lead for Chapter 7(I&C) and 18(HFE). This included MCR and TSC/EOF HFE design.

H.B. Robinson Nuclear Plant- Hartsville Sc

In a combined IT/OT manager role, implemented and managed the site Process Systems and Business Computing group and the site cyber security program at the H.B. Robinson Nuclear Plant. Managed 8 to 10 direct reports in the following topic areas:- Management and support of site IT infrastructure and client desk-side support. This include application support, network maintenance and support, telecommunications, and end user productivity applications.- Design, management, support, and maintenance of the plant process computer, nuclear security systems, plant simulator and other digital process systems. -Managed, reviewed, and approved plant modifications under the design engineering program and provided project management support to critical projects. -Accountable for the design and licensing bases of assigned systems. -Cyber Security responsibilities encompassed comprehensive network security, disaster recovery, application development security, and information security management for Plant Process systems.

H.B.Robinson Nuclear Plant & Various Fossil Fueled Power Plants

Provided design, configuration, implementation and maintenance of a wide variety of plant digital I&C and security computer equipment at nuclear and fossil power plant facilities including the development and implementation of application software (ANSI C, FORTRAN, and Assembly), hardware and platform design and integration (minicomputer and PC),and cyber security requirements.

6Th And 7Th Fleets

Duties involved operation, management, testing, and repair of computerized electronic warfare equipment aboard ships at sea in a complex tactical environment which included developing and executing operational tactics of electronic diversion, spoofing, electronic intelligence gathering, real-time countermeasures, information and operational security, electronic emission control (EMCON), passive target detection, and jamming protocols.