Glen Boyer Cissp ,Cism, Cisa, Cgeit, Cap,Ccsk, Itilv3 Email & Phone Number

Palo Alto, California, Us

• Management of the portfolio UHA and ValleyCare-specific information security risks• Manage UHA and ValleyCare security policies, standards and procedures within the Stanford Healthcare policy portfolio;• Defining UHA and ValleyCare operational security procedures necessary to support outcomes; • Conduct enterprise risk assessments for UHA and ValleyCare, including subsequent gap analyses and management action plans;• Monitoring operational security activities at UHA and ValleyCare in terms of Stanford strategic outcomes; • Auditing technical implementation of systems and devices in line with security standards and designs; escalating issues to governance as needed. • Acts as the primary UHA and ValleyCare IT Security contact for suppliers; evaluates security products and solutions; consults with internal teams on various security-related requirements, within Stanford Healthcare enterprise architecture standards;• Contributes to the broad range of hospital-wide initiatives as guided by the Information Security Officer;• Identifies and manages security related issues; sets project quality and performance standards. • Oversees the delivery of security certification initiatives, and monitors implementation of Security initiatives;Schedules and drives audits as applicable and when requested;• Provides tactical response and overall leadership for day-to-day security incidents;• Sets and measures security effectiveness metrics for the UHA and ValleyCare systems;• Works with the Information Security Officer to help establish and track security objectives. Works with the Information Security Officer, and the Stanford Healthcare Information Technology Services team and other teams to ensure compliance to security standards and policies.• Development of long term security model for UHA and ValleyCare within the larger Stanford framework.

Pleasanton, California, Us

• Program management of a program of security controls and processes using Stanford standard solutions and services • Implementing ValleyCare operational security procedures necessary to support outcomes; • Monitoring operational security activities at ValleyCare under Stanford direction; • Auditing technical implementation of systems and devices in line with security standards and designs; escalating issues to governance as needed. • Acts as the primary ValleyCare operational Digital Solutions Security contact for suppliers; • Contributes to the broad range of hospital-wide initiatives as guided by the Information Security Officer;• Maintains an awareness of the current industry environment that shapes opportunities for solutions (i.e. news events, trends, mergers, etc.); participates in, and assists with, company events such as training and internal initiatives;• Identifies and manages security related issues; sets project quality and performance standards. • Oversees the delivery of security initiatives;• Supports audit field work, analysis and remediation as applicable and when requested;• Provides tactical response and overall leadership for day-to-day security incidents;• Measures security effectiveness metrics for the ValleyCare system;• Works with the Stanford Healthcare Information Technology Information Security Officer to help establish and track security objectives. • Provides tactical response and overall leadership for day-to-day security incidents;• Measures security effectiveness metrics for the ValleyCare system;• Works with the Stanford Healthcare Information Technology Information Security Officer to help establish and track security objectives.

Austin, Tx, Us

• Coordinates and evaluates the Information Assurance program activities at the Enterprise and HHSC agency levels and reviews and approves budgets. • Develops and establishes the Information Assurance function's strategic plan, goals and objectives for the HHSC agency and the Enterprise Information Security Offices. • Develops security and business continuance standards and action plans, security policies based on business needs, risk assessments based on regulatory requirements.• Conducts information security risk analysis and system audits. • Plans, assigns, and/or directs the work of others and works under minimal supervision, with extensive latitude for the use of initiative and independent judgment.

Austin, Tx, Us

• Responsible for the design and implementation of TIERS Information Security Program• Developed and Implemented TIERS security policies, procedures, and implementation plans to achieve security objectives. • Responsible for assessing compliance with Federal (NIST) and State of Texas (TAC 202) security regulatory frameworks. • Participated actively in developing and coordinating responses to TIERS Security audit findings. • Participated in HHSC systems security related to the overall Integrated Eligibility Enrollment (IEE) systems.• Responsible for coordinating security efforts and implementation of the TIERS Security Program with the HHSC Enterprise Security organization. • Responsible for the development of a detailed security procedure and implementation plan, worked with all TIERS Operations staff to ensure required tasks are completed. • Responsible for the assessment of tools to automate security control compliance, working with TIERS staff to ensure said compliance while not impacting the TIERS system users. • Assisted in the development of a more robust security governance approach, working with HHSC Enterprise Security to develop a standardized approach. • Responsible for developing a risk management strategy and approach for TIERS information security.

Us

• Provided InfoSec consultative services at the Executive Management level (CIO, CISO, CTO, etc..)• Assisted in the development of policies, standards, and procedures based on new laws governing IT Compliance & Security.• Provided guidance to Executive management in planning, analyzing, developing, implementing, and enhancing security programs.• Provided guidance to executive management on information risk assessment process, including developing and managing the information risk assessment and reporting processes.• Provided guidance to executive management on corporate incident response process, including developing and managing corporate guidelines and coordinating with others that have specific roles and elevating issues to Management. • Worked proactively with IS and business unit management with respect to strategic and tactical plans for information security and business resumption management.• Experience in the detection and remediation of control weaknesses in areas such as Change Management, Systems Lifecycle Management, Data Management, Interface Management, User Access Management, and General security.• Coordinated efforts enterprise wide in the development and implementation of a Plan of Actions and Milestones (POA&Ms) to remediate control weaknesses when identified.• Strong Working Knowledge of Various Federal Regulatory Compliance requirements (i.e FISMA, HIPAA, SOX, PCI, GLBA, SB1386, etc…)• Thorough understanding of Various Security Frameworks ISO 27002, 17799 Security Standard, ITIL, National Institute of Standards and Technology NIST, COBIT 5.x, 4.x 3.x Domains and Control Objectives. • Experienced with performing IT Certification and Accreditation assessments of internal controls as required by OMB A-123, and OMB-130 pertaining to FISMA of 2002, • Thorough knowledge of NIST SP800-18, SP800-26, SP800-30, SP800-37, SP800-53, SP800-53A, • Thorough knowledge of FIPS 199, FIPS200, FIPS201

Los Angeles, California, Us

Consulting at the Los Angeles Superior Court, developing an Enterprise IS Security Program.• Provided InfoSec consultative services at the Executive Management level (CIO, CISO, CTO, etc..)• Assisted in the development of policies, standards, and procedures based on new laws governing IT Compliance & Security.• Provided guidance to Executive management in planning, analyzing, developing, implementing, and enhancing security programs.• Provided guidance to executive management on information risk assessment process, including developing and managing the information risk assessment and reporting processes.• Provided guidance to executive management on corporate incident response process, including developing and managing corporate guidelines and coordinating with others that have specific roles and elevating issues to Management. • Worked proactively with IS and business unit management with respect to strategic and tactical plans for information security and business resumption management.• Worked proactively with IS and business units regarding major systems and application changes to help ensure that information security standards and issues are addressed early in a project’s life and incorporated into the resulting program.• Experience in the detection and remediation of control weaknesses in areas such as Change Management, Systems Lifecycle Management, Data Management, Interface Management, User Access Management, and General security.• Coordinated efforts enterprise wide in the development and implementation of a Plan of Actions and Milestones (POA&Ms) to remediate control weaknesses when identified.

Renton, Wa, Us

• Acted as a resource in the development and implementation of security strategy, policies, and standards for the enterprise.• Assisted in the development of an enterprise Information Security Risk Assessment Methodology. • Assisted in the development of a risk management framework (including risk criteria, risk thresholds, processes, and requirements for tools)• Worked with regional executive leadership on risk analysis• Provided regional and enterprise wide security Risk Assessments

Infrastructure Specialist – Architect (Platform)• Responsible for planning the design, development, integration and implementation of the infrastructure components of a solution that may span multiple disciplines, technologies and/or lines of business. • Document, present and articulate the solution to executive level management and/or clients.• Architected and project managed an automated desktop build, deploy and manage solution that was tightly integrated with configuration management to prototype.• Architected 3 tier (HSM) SAN, NAS solution• Developed technical roadmap for hardware (server/client devices) and software (NOS and client OS)• Provided input into NMCI Technical Policy• Authored architectural documents• Authored product related topical white papersInfrastructure Specialist – System Engineer (Thin Client Lead)• Lead the design and implementation of the Citrix Metaframe solution at SPAWAR• Hardened Citrix and Nfuse servers for use on the NMCI network• Provided research and development into an nFuse web based integrated PKI DoD CAC/SmartCard solution.• Provided support to NOC and regional site level deployment of solution.• Authored technical design documents

San Diego, California, Us

• Developed IT policies, standards, procedures and guidelines pertaining to computer and network devices for use at our corporate and remote sites. • Provided operational security leadership• Managed a team of 6 technicians and 2 engineers to support 300+ corporate users, 30+ remote sites. • Selected, trained, mentored IT staff• Responsible for the design and development of network plans/strategies that include: the physical/network layout, wiring schemes, open systems, product interfaces and implementation plans.• Defined and integrated services such as file access file transfer, messaging, etc. and provided a common platform and network environment. • Deploy distributive network solutions to ensure system functionality, interoperability, timely use and business continuity• Design, project management, and supervision of network operating system installations, upgrades and migrations• Installed, configured and maintained Cisco 2524, 3620 routers at corporate site • Installed, configured and maintained Cisco 770, 1604, 2610 routers at remote sites.• Installed, configured and maintained Nortel Baystack 350, 450 layer 2 switches• Installed, configured and maintained Nortel Bay Acellar 1150 Layer 3 switches• Installed, configured and maintained Compaq 800, 1500, 1850, DL 380, 2500, 5500 Servers • Installed and configured GWI Helpdesk software for handling of customer support issues.• Responsible for the purchasing and implementation of enterprise wide network equipment. Ordered and maintained the corporate office T-1 for internet access, PRIs T-1 for phone system. Ordered and maintained the corporate remote sites xDSL, ISDN, Frame Relay Ckts.

• Provided engineering support to inside sales to determine best solution to meet customer needs. • Provided consulting on product interfaces, vendor products and industry standards. • Researched, and tested new technologies• Responsible for the design, configuration, development, integration, implementation and on-going maintenance of network solutions. • Experience NDS, AD design in LAN/WAN environments• Performed NOS maintenance by installing service packs, patches, ensured HW had latest device drivers.• Performed upgrades of Novell 3.x to 4.x• Performed migratation of Novell 4.x to NT4• Installed and configured Compaq 1850, 2500, 5500 Proliant servers utilizing Novell 4.x and NT4 NOSs.• Built custom server configurations to customer specifications• Installed and configured 3comm Superstack and Baystack switches.• Provided onsite support of Exchange 5.x, Groupwise 5.x, Lotus Notes 4.x , IIS, Apache, • Arcserve, Backup Exec, etc... Troubleshot LAN/WAN problems

• Provided system engineering support in the development, testing, and debugging of a handheld RF wireless device on an NT4 platform. • Provided tier 3 support of our systems. • Designed, developed a portable, wireless, Multi OS platform solution, utilizing IBM Thinkpad Laptops, Aironet RF wireless Access points and pcmcia cards and System Commander for the sales department to demonstrate at the customer sites the various platforms that our software application could reside on.• Installed, configured, setup and maintained demonstration network at conventions.• Designed, implemented, diagnosed, and troubleshot the integration of our solution within hospital environments based on Novell Netware 3.1x, and 4.x, Microsoft NT3.51 and NT4.0. • Installed, configured and troubleshot Symbol RF handheld devices running our custom clinical respiratory care application to communicate within an RF wireless LAN. • In depth knowledge of the OSI model. • Utilized network protocol analyzers to diagnose misbehaving networks.

• Built, Installed, configured and maintained AST and other Intel based desktop computers.• Provided PC based desktop, hardware, software support in a 450+ multiuser, heterogeneous network environment. • Performed software upgrades, patches, service packs, and updated hardware device drivers.• Attained my CNE and advanced to lead technician within 6 months• Performed LAN administration duties to include but not limited to; Add, delete, create, move user accounts, backups, restores, network & local printer setups, etc… • Personally requested by and supported senior executive management’s work and personal computers.• Heavy emphasis on customer satisfaction.

• Duties included the setup, configuration and support of mobile electronic computer and switching systems equipment utilized in satellite, microwave, and RF telecommunication. • Performed scheduled and unscheduled maintenance. • Isolated malfunctions by using technical data, logic diagrams, schematics, and specialized electronic test equipment, i.e spectrum analyzers, oscilloscopes, digital multimeters, etc... • Repaired and modified equipment when necessary.

• Responsibilities included intermediate maintenance of equipment such as Automatic flight control, navigation, flight and fuel quantity instruments, inertial navigation equipment and integrated computers. • Analyze, isolate and repair malfunctioning equipment through the use of logic tracing, schematic, and wiring diagrams and associated test equipment, i.e. spectrum analyzers, oscilloscopes, digital multimeters, etc...

• Job consisted of the testing, troubleshooting and repairing to the component level of various color computer monitor models and assembly line support equipment utilizing various support test equipment i.e. digital multimeters, oscilloscopes, video signal generator. • Developed procedures in conjunction with engineering to reduce the start up time for color computer model changeovers. Programmed various video signal associated computer aided calibration and test support equipment to manufacturers specifications. • Created reports from the DBMS which were utilized in general production meetings and quality control assessments to determine the overall efficiency of the assembly line.

• Responsibilities included maintenance of avionic electronic warfare (EW) intercept and analysis equipment. • Repair avionics EW intercept and analysis equipment. Isolate malfunctions through the use of schematics, wiring diagrams, flow charts, voltage measurements, waveform observation and other tests using support equipment i.e spectrum analyzers, oscilloscopes, digital multimeters and computer aided diagnostics. • Repair equipment including EW receivers, radar warning receiver, jamming transmitters, EW pods, dispensers, signal analysis equipment, recorders, direction finders, digital computer subsystems and support equipment. • Tune and align, adjust and calibrate avionics EW equipment and intercept and analysis systems according to technical publications.

Computer Science

As, Electronic Technology