Dean Thompson Email & Phone Number

Melbourne, Vic, Au

Spokane, Washington, Us

Woburn, Massachusetts, Us

Collaborative Automated Course of Action Operations (CACAO) - Technical Committee

Woburn, Massachusetts, Us

Threat Actor Context (TAC) - Technical Committee

Woburn, Massachusetts, Us

Cyber Threat Intelligence (CTI) Technical Committee Member

Us

APAC Threat Intelligence Committee

Us

APAC Threat Intelligence Committee

Melbourne, Victoria, Au

Working directly for the Chief Information Security Officer (CISO), this role is responsible for the day to day Cyber Security operational capabilities at ANZ. These capabilities extend to overseeing the Security Operations Centre, Cyber Security Threat Intelligence, Application Security, Penetration Testing, Big Data Analytics, Risk Governance, various support groups for the tools that are used as well as squads delivering new capability.This role originally required the implementation of ANZ's new work force strategy which involved the rolling out ANZ's Agile based approach to working called New Ways of Working (NWOW).Duties performed as part of this role have included:• Working as part of the management team to develop the new structure and having it approved• Recruitment and assessment of all staff and selection for new roles• Execution and delivery of the technology transformation strategy for New Ways of Working (NWOW)• Implementing and supporting agile work practices (including implementing elements of the Scaled Agile Framework®)• Development of Themes, Features, Epics and Stories and delivering value to our customer base• Delivering value to our customers• Setting and managing budgets as well as managing resources and recruitment• Further developing and growing the team from both a technical and managerial skill-set• Adapting and implementing NIST SP 800-53 Security and Privacy (SP) framework (revision 4 & 5)• Ensuring both local and industry based obligations (eg. PCI DSS) are complied withAchieving these tasks has allowed for Cyber Defence to be structured efficiently to embrace the true value of agile delivery by working in autonomous squads and to ensure that value is delivered to our customers in a timely manner.

Melbourne, Victoria, Au

Responsible for establishing the Cyber Security Threat Intelligence and Engineering functionswithin Cyber Security Operations at ANZ. This program has resulted in international recognition for ANZ and the Cyber Security Threat Intelligence Analysts that work in the program. These successes have been discussed at the RSA Security Conference in San Francisco as well as at a FS-ISAC conference in Singapore. The program has resulted in building up a large number of local and international contacts for the sharing of Cyber Threat Intelligence across the world and a number of industries.Duties performed as part of this program have included developing a strategy for the sharing of Cyber Security Intelligence with other organisations using a standardised approach of STIX/TAXII, establishing and implementing a Cyber Security Threat Intelligence repository, working with various international standards bodies to ensure that Cyber Security Threat Intelligence is standardised, integration of Cyber Security Threat Intelligence information with an in-house big data platform, providing our Security Operations Centre with tactical and strategic threat intelligence for analysts to make informed decisions from and constantly promoting the role of sharing Cyber Security Threat Intelligence.Achieving these tasks has allowed ANZ to be able to fuse our Cyber Threat Intelligence with our Big Data environment to ensure that ANZ is able to quickly detect, respond and eliminate friends in a timely manner whilst looking to orchestrate in the future automated response.

Melbourne, Victoria, Au

Responsible for transforming the ad-hoc response of Cyber Security Incidents into a Global Security Operations Centre (GSOC) operating on a 24x7 basis providing the capability of ANZ to respond to Cyber Security Incidents around the clock and to satisfy the requirements of a number of regulatory requirements.Duties included:• Establishing structure & recruiting of 'right' personnel• Develop playbooks to be used within the Global Security Operations Centre (GSOC)• Preparing budgets and tracking expenditure• Team management (rosters, career development / planning)• Building out the Incident Management System (IMS) used to record security incidents• Assisted with the selection of the Security Information Event Management (SIEM) system • Reviewing 700+ security event classifications from various security technologies to identify events which translate to security alerts that require a response- Network Based Services (DDoS Protection, Network Abnormalities, NIDS/NIPS)- Application Based Network Services (Web Application Firewalls)• Working with Managed Security Services Providers (MSSP)• Implementing Security Technologies:- Web and File Malware content screening- SIEM Technology- o Security Network Analytics technology to examine network traffic throughout- Network Data Loss Prevention (DLP) System • Representing ANZ on a number of Joint Developer Partner / Customer Advisory Boards to influence the development and use of security products and systems• Dealing with a number of regulators that have a specific interest in computer security incidents:- Australian Prudential Regulatory Authority (APRA)- Bank Of Indonesia (BOI)- Federal Deposit Insurance Corporation (FDIC)- Hong Kong Monetary Authority (HKMA)- Monetary Authority of Singapore (MAS)- Reserve Bank of India (RBI)- Reserve Bank of New Zealand (RBNZ)

Melbourne, Victoria, Au

Responsible for providing the security knowledge and technology uplift to ANZ's Cyber Security Response team. This uplift provided ANZ with the knowledge and capability since 2004 to respond to Cyber Security Incidents impacting its infrastructure and provided a means of having Cyber Security expertise on staff.Responsibilities included:• Securing ANZ's global network through the use of Intrusion Detection/Prevention Systems (both network and host based) and integrating vulnerability and patching information• Leading the Cyber Security Incident Response Team (CSIRT)• Ensuring Cyber Security incidents were identified and mapped to ANZ’s operational risk framework• Perform in-house training and skills transfers to ensure relevance to the security industry• Building an Security Information Event Management (SIEM) system encompassing operating system performance, security and vulnerability information• Working on national critical infrastructure security issues for the Australian financial sector with the Attorney General’s department• Dealing with a number of regulators, advisory groups and auditing firms- Australian Prudential Regulatory Authority (APRA)- Monetary Authority of Singapore (MAS)- Federal Deposit Insurance Corporation (FDIC)- Reserve Bank of New Zealand (RBNZ)

Responsible for working throughout the financial sector and the broader Australian Cyberstorm III exercise group to assist in the build out of the scenario as well as coordinate all of the inputs, artifacts and injects into the Cyberstorm III exercise. This also included the building of injects to be used throughout the exercise as well as loading all of the timeline events into the central planning tool.Responsibilities also included the execution of the timeline within ANZ and ensuring that all other financial sectors were cross-communicating with one another as the scenario progressed as well as ensuring that the relevant stakeholders were being engaged during exercise play.

East Melbourne, Victoria, Au

Responsible under contract for designing and implementing the companies internal intranet (including the acquisition of networking equipment) and establishing the relevant network infrastructure to support the companies public identity to both domestic and international organisations. This provided Learning Seat with the ability to connect to the internet and to offer its on-line training platform to a number of small and large companies.Responsibilities included:• Coordinating and organising system installations and upgrades• Ensure that the data backup regime is followed • Continuously monitoring systems to ensure their 24x7 availability (Fault diagnostics / Automatic paging)• Ensure the security of the system (Protected by custom made automated firewall)o Perform forensic data and security services when required• Ensure file integrity• Support the technical manager• Provide reports on web and network traffic and ensure SLA’s are being met• Supervise and participate in project management activities

Responsible under contract to design, implement and supervise external parties in the construction of the company’s internal intranet (including an encrypted VPN link) and establishing network and data infrastructure at the co-location site to support various voice traffic and data systems as well as ensuring that the associated accounting and configuration information is recorded. Providing this enabled the startup company 'Australian Telecoms Exchange' with the ability to provide a market place for VoIP communications across the world and to become a VoIP inter-change for a number of companies.Job responsibilities included:• Co-ordinate and organise system installations and upgrades• Liaise with external contractors to ensure the work conforms to the standards of the company• Liaise with external suppliers to ascertain the equipment required and secure the best price• Support the infrastructure manager and act as a technical representative of the company• Provide technical support to the company when required• Co-ordinate the data side of VoIP communications

Responsible for working throughout the financial sector and the broader Australian Cyberstorm II exercise group to assist in the build out of the scenario as well as coordinate all of the inputs, artifacts and injects into the Cyberstorm II exercise. This also included the building of injects to be used throughout the exercise as well as loading all of the timeline events into the central planning tool.Responsibilities also included the execution of the timeline within ANZ and ensuring that all other financial sectors were cross-communicating with one another as the scenario progressed as well as ensuring that the relevant stakeholders were being engaged during exercise play.

Responsible for designing, building and delivering a 30 hour course (10 weeks x 3 hours) covering the area of Enterprise IT Security. Topics included:• Wired Ethernet Network Protection / Wireless Networks• Workstation and Server security throughout the enterprise• Digital Certificates / Encrypted Communication Channels / IPSec protocol / Viruses

London, Gb

Responsible under contract to assist with an internet start-up company in establishing a presence on the internet (web). Involved in the design and implementation was an internal intranet (including the acquisition of networking equipment). This involved organising a fibre optic cable to be laid to the company’s headquarters and to arrange for a number of building works to be performed to secure the site. Providing this enabled the company to provide early communication services over WAP channels (a pre-cursor to SMS and MMS) to customers around the world.Other responsibilities included:• Co-ordinate and organising system installations and upgrades• Continuously monitoring systems to ensure their 24x7 availability (Fault diagnostics / Automatic paging)• Evaluate both hardware and software before deploying it into a production environment• Support the CEO of the company• Supervising a junior network engineer• Interacting with clients of the system• Preparing and giving presentations to both sales and technical support staff of the upstream ISP provider• Managing numerous projects

Lausanne, Ch

Throughout the Sydney Olympics I assisted by providing technical expertise to IOC delegates, visitors and external entities such as SOCOG and the World Anti-Doping Agency as well as those IOC members based in Lausanne. Responsibilities included:• Providing helpdesk support to all IOC delegates and their guests• Ensuring that the ISDN link maintaining the VPN back to Lausanne was operational• Assist in the administration work required to run a successful Olympics• Bridge the cultural divide between many overseas visitors and AustraliaAwarded an internal Olympic Medal of recognition at IOC session in Sydney (2000) for services provided to the International Olympic Committee in Sydney.

Victoria, 3800, Au

Victoria, 3800, Au

Doctor Of Philosophy - Phd, Computer Science

Honours (1St Class), Bachelor Of Computing

Bachelor Of Computing

Advanced Diploma In Computing Systems Engineering

Victorian Certificate Of Education (Vce)

Checkpoint, Cisco, Eclectic Iq, Fireeye, Linux, Microsoft, Netiq, Palo Alto, Solaris, Symantec

Presenter, Panel Speaker