Michael Cuff Email & Phone Number

CoBiT Based Audits - Personally carry out detailed computer CoBiT based audit work, and ensure this planned work is completed properly and in time.Risk Management - Revised Key Risk Scenarios (KRS) ISO 27001 Compliance Based IT Consultancy - Security Specialist working on the ISO 27001 compliance for various controls as part of the team on a project.PCI DSS Compliance Based IT Consultancy - Consulting on Payment Card Industry (PCI) controls within various aspects of the project. Sarbanes-Oxley Act Compliance Based IT Consultancy – Managed and was involved with at least 10 companies by providing assurance that adequate controls were implemented to meet sections 302 and 404 of the Sarbanes Oxley Act of 2002.Project Management - Was involved in various projects and managed my own projects within the scope of work given to me.Investigations – Have been involved with a lot of investigations relating to both financial and computer data utilising Microsoft Access and making use of Structured Query Language (SQL). Studied Oracle at university and have been involved in many application reviews to identify weaknesses including reconciliations.Specialties: Technical reviews of Unix, Windows, Networks, Oracle and Sequel Databases including user (privileged) analysis through scripts and tools including generic and default userid’s. Detailed reviews of change management. Detailed reviews of security controls including security policies, user management, authentication, user re-verification, starters/leavers/movers, security logs, segregation of duties, third parties and physical access.Project management and definition of projects. w

Listed skills include Iso 27001, Pci Dss, Information Security, Risk Management, and 3 others.