I have specialized in information security and throughout my career I have helped define new product markets - firewalls (1993) and intrusion prevention (2001); consulted with clients to solve some of their toughest information security problems - electric utilities, government agencies, commercial companies; and built and managed technical teams.During my 25-year information security career, I helped start and lead these major initiatives- The creation of the first cyber security risk management process across the entire electricity sector with the publication of the draft Electricity Sector Risk Management Guideline (ES-RMP) in 2012, a partnership led by NIST, NERC, and the DOE- The creation of the first major Smart Grid security guideline with the publication in 2010 of NIST Interagency Report 7628 (NISTIR 7628)? Guidelines for Smart Grid Cyber Security- The emergence of the firewall market starting in 1993 with the public release of the DARPA-sponsored TIS Firewall Toolkit and later the toolkit-based Gauntlet Firewall product- The creation of the host-based Intrusion Prevention market with the introduction of Okena StormWatch in 2001, later acquired by CiscoI serve as a Vice Chair of the NIST-led Smart Grid Interoperability Panel's Cyber Security Working Group (SGIP-CSWG) since January 2010, leading major activities including- The publication in August 2010 of National Institute Standards of Technology Interagency Report (NISTIR) 7628 - Guidelines for Smart Grid Cyber Security- I am a founding member of the DOE-led Electricity Subector Risk Management Process initiative, co-led with NERC and NIST, which will publish a second draft of a risk management process guideline in April 2012 to be utilized by stakeholders across the entire electric sector- Led the team responsible for providing feedback to NERC on the draft version 5 CIP standards and how to better align them with CSWG guidance