Ryan Liu has 22 years of direct experience in systems audit and I.T. risk management with over 10 years of experience working in formal security risk assessment and health informatics. Having started his career working for two international accounting and audit firms, he has a solid foundation in IT audit and controls and played a key role in building one of the earliest professional network penetration testing practices in Canada. In addition to information security governance, security standards conformance (CobiT, ISO27002), vulnerability assessment, and penetration testing, Ryan has delivered risk assessments for Government of British Columbia and Health Authorities for major multi-year IT projects using both formalized risk assessment methodologies (RCMP, ISF IRAM, OCIO STRA) and customized assessments. Ryan has provided security services to both public and private sector clients including provincial & municipal governments, BC health authorities, crown corporations, post-secondary, retail, mining, and financial services.