I'm a Practice Lead in Governance at Vital Advisory. I bring an attitude and approach that "good security is good for business". I show how to optimise security and IT to enable and unlock business value. I'm also tired of the cybersecurity industry using myth and misdirection - it's part of the reason there are so many cyber issues in business today.I've been in information security, IT governance and risk management since the '80s. I've been involved in IT audit for 35 years, having started in the era of punched-card systems. I've achieved ISACA's CISA, CISM, CGEIT, CRISC and CDPSE credentials, and am also an APMG-certified trainer for them all as well, along with being a PECB-accredited trainer for ISO27001 Lead Implementer. I also contribute to developing and presenting Vital Advisory's training courses covering Technology Risk Management, Governance, Information Security and Assurance. I'm also a mentor in ISACA's OneinTech program and I've had the pleasure of presenting on security, risk, governance and audit in Australia, Portugal, Fiji, Belgium, Japan, Korea, PNG and New Zealand. I've served on over a dozen ISACA Boards and Committees (including as International Vice President, Treasurer, CISM Committee Chair, Sydney Chapter President and Treasurer, among others) and for NSW Government (most notably as Founder and Chair of "Information Security Managers in Government" (today called the NSW Government's Community of Practice).If you want to connect with me, please add your reason. I will ignore generic connection requests.
Listed skills include Information Security, It Audit, Information Security Management, Security, and 31 others.