CAPSLOCK Intensive Cyber Security training & workplace readiness programme (02/23-08/23)• Produced a Risk Assessment plan, assessing a range of possible automated tools while also providing analysis of any risks not covered by such tools• Designed an audit plan as part of a gap analysis against the requirements of ISO 27001, including approaches for different aspects of a business, timeframes and evidence requirements• Developed a Decommissioning plan for an application containing sensitive data including the identification of all legal implications and the methods of communication with key stakeholders• Completed a scoping exercise for the implementation of ISO 27001 including the technical, physical and people elements and a public scope statement• Conducted a business-specific analysis of InfoSec Laws and regulations including consequences of non-compliance with each aspect• Considered multiple aspects of GDPR processing legislation from the perspective of both the Data Controller and Data Processor with emphasis on outlining what information can be processed and by whom• Created a plan for selecting and using Metrics to analyse the effectiveness of an induction programme• Conducted an Octave Allegro Risk Management process exercise including impact assessment, critical asset identification and mission alignment• Presented a detailed analysis of the importance of Security Architecture approaches and controls in a multi-faceted business• Prepared a root cause analysis of Shadow IT usage, including the political implications and any follow-on activities to develop a process to manage Shadow IT• Analysed the advantages and disadvantages of a DevSecOps approach to Cloud computing, putting forward a business case both for and against implementation• Created numerous presentations on varied Cyber-related topics with both Technical and Non-technical intended audiences.• Additional topics covered include the following: Social Engineering; Network Fundamentals; Operating Systems; Application Security; Outsourcing & Supply Chain security; Endpoint protection; Cloud Infrastructure; Applied Cryptography; Digital Forensics; Identity and Access Management; Penetration Testing & SOC; Threat Intelligence; Business Continuity Management.