Thomas Strickland Email & Phone Number

Providing Cyber/Physical Security and Compliance expertise to Hyper Critical Infrastructures and Assets.Services and support include NERC-CIP, Power Grid, Nuclear, Chemical, Oil/Gas, Water, Control/Data Centers, Government, Banking and Healthcare enterprises.

Alpharetta, Georgia, Us

Providing CISO-as-a-Service to clients across all industries.

Overland Park, Ks, Us

Charged with delivering Innovative Guidance and Consulting Expertise to client’s Executive Management. Expert in delivering technology innovation, trusted advisory and thought leadership to NERC CIP, Energy, Oil & Gas and Chemical industry clients.Service offerings include NERC CIP 002-011 and 014, Critical Infrastructure, Strategy, Compliance, Security, Assessments and projects to identify and mitigate cyber and physical security to protect Data Center facilities, communications and critical infrastructure environments and provide recommendations to establish ongoing support initiatives. Sample large-scale projects include:- Pacific Gas & Electric (PG&E) – Performed NERC CIP implementation for largest utility footprint in the US. Tasks included defining and implementing a complete NERC CIP-002 BES Categorization program, compliance and infrastructure enhancements across all CIP requirements and serving as NERC CIP SME for Executive Management.- Iberdrola USA – Performed several engagements related to NERC CIP, security, network and control center assessments.- Xcel Energy – Performed NERC CIP, security, network and control center assessments.- Westar Energy - Performed NERC CIP, security, substation and control center assessments.- Salt River Project (SRP) - Performed NERC CIP, security, network and control center assessments.- AECI – Performed NERC CIP security and substation assessments and developed recommendations and projects for NERC CIP compliance.- AltaLink – Managed team performing forensic analysis, root cause assessment and developed recommendations for infrastructure enhancements.

Milan, It

Developed foundation and framework for new OT and IT cyber security practice. Tasks included teaming with cross-divisions to identify potential security service offerings.

Global, Us

Challenged as Chief Architect cultivating new business partnerships and developing, building and delivering strategic technology direction and consulting practice to clients and industry leaders.Performed technical reviews and leading teams on multiple projects under development to ensure client and management expectations, risk mitigation, milestones, methodologies, timelines, budgets and deliverables were appropriate and recommended corrective action as needed.Increased the manageability, risk remediation, productivity, compliance, processing, security, functionality and recover-ability of data centers and other supporting infrastructures across all industry verticals.DHS Chemical Terrorism Vulnerability Authorized User (CVI) Member DHS Industrial Control Systems Joint Working Group (ICSJWG)Member DHS - US Computer Emergency Readiness Team (US-CERT)DHS - Industrial Control Systems Cyber Security Advanced Training

Boulogne-Billancourt, Île-De-France, Fr

Teamed with most projects related to Smart Grid design and development to produce Smart Grid products. Key projects included:• Teamed with Management to define, design and build the Smart Grid Engineering and Development Laboratory and datacenter in Atlanta. • Advanced Metering Infrastructure (AMI) – Worked with product owners and lead architects to design a comprehensive and secure AMI from the user/consumer to the AMI head-end and to back office operations. Also included Demand Response and near-time metering operations and technologies.• Electric Vehicle Charging Stations – Worked to design, develop and build the Wattstation and EV-1000 charging stations. • Meter Mate – Worked to enhance a Smart Meter control application. • SM3000 Common Meters Platform – Teamed with meter developers to design security requirements for next generation smart meters. • NERC-CIP Compliance Assessments• New Product Initiatives (NPI) • GE Digital Energy Smart Grid Requirements • Developed and performed Smart Grid Audits and Assessments • Designed and helped oversee GE Digital Energy Data Center and LabContinuing to participate with government, compliance and industry standards development entities to include:• NIST SG Security Architecture Sub-committee• NIST SG Security Interoperability Sub-committee• NIST SG Security Compliance Sub-committee• GE Corporate Product Security Working Group• GE Interoperability Pulse - Demand Optimization Workgroup• AGILE Smart Grid Product Development Lifecycle methodologies

Global, Us

Provided consulting services to the Business Technology Risk Management (BTRM) National Security Practice group. Roles include Executive Management guidance, security, identity management, forensics, HIPAA, compliance, data center design, build and assessments and disaster recovery methodologies and hands on support for clients• Bank of New York / Mellon Bank• National Nuclear Enrichment Facility• Westinghouse Nuclear Energy HQ• Westinghouse Nuclear Energy New Plants• CSL-Behring Pharmaceuticals• Houston Casualty Company (HCC)• Norwalk Hospital• Chicago Board of Trade (CBoT) - New York Board of Trade (NYBoT) – Intercontinental Exchange (ICE• Ingram Industries• Edward Jones (EDJ) Investments• VISA International• MasterCard International• Automated Data Processing (ADP Payroll)• General Electric (GE) Money• Airline Tariff Publishing Company (ATPCO)• General Dynamics – Land Systems• Reinsurance Group of America (RGA)• Huntsman Chemical Company• Medicare Part-D

Provided consulting services to include Management guidance, PKI, security, identity management, forensics, PCI, Sarbanes-Oxley, HIPAA, compliance, data center assessment and disaster recovery methodologies for partner companies. Provided expert consulting and assessment services to companies around the world. Also served as or provided guidance to Chief Technology Officer(s), Chief Information Officer(s) Chief Risk Officer(s) and Director(s) of Security, just to name a few, on an interim basis.• Department of Transportation• United Parcel Service (UPS)• DHS / CDC Bio Terrorism Assessment• Department of Homeland Security – RFID• Bertelsmann AG• ISSI / IBM• UICI Health Market• Stanley Works• FBI Infragard• Department of Defense• Coca Cola• SecurityTrends LLC• FOX Network and 4Kids Entertainment• InterContinental Hotels Group• Federal Home Loan Bank• Commerce Link Inc• Crucial Security Inc• Qatalys Inc• Teletrack

Washington, Dc, Us

Principal architect and consultant responsible for providing management, implementation, data center architectural, technical PKI strong authentication, security and audit support to ISSA, Department of the Treasury (FMS), Federal Deposit Insurance Corporation (FDIC) and additional customers and clients. Infrastructure achieved goal of protecting $650 Billion per day liability of transferred funds.• Design, develop and implement a NIST level 4 “High Security” assurance level data center and strategic security and Entrust based PKI architecture environments to governmental agencies in Washington DC.• Design, develop and implement a strategic PKI audit and risk assessment security practice utilizing ISO/IEC 17799, BS 7799-1, Common Criteria, PCI, NIST, WebTrust and ABA standards.• Instrumental in the design and execution of PKI crypto key signing ceremonies, chain of custody controls, crypto key transport, crypto key storage and directory services (LDAP, X.500).• Attended Department of Treasury Security Review courses outlining NIST security specifications and guidelines needed for establishing and maintaining “High Security” facilities and application infrastructures.• Perform billable audit, compliance, security, CP and CPS consulting work as needed.• Perform assessment reviews of strategic partnerships, customers and clients. • Design, develop and implement an SSL authentication and browser root chaining service similar to Verisign and Baltimore Technologies.• Perform security and audit risk assessments to identify operational risks and recommend mitigating controls.• Design, architect and install certificate and registration authorities, Certificate Policy (CP) and Certificate Practice Statements (CPS) documents, Secure-ID, RSA KEON CA, Sentry CA, Entrust, testing and prototyping of cryptographic applications and general e-commerce functionality (firewalls, routers, DMZ, dial up, LAN, WAN, wireless).

Burlington, Massachusetts, Us

Responsible for providing sales, managerial and technical PKI, security and audit support to RSA Security Professional Services, Sales and Marketing and customers and clients. • Working with management to identify potential opportunities, provide RFP responses and managing sales cycles on numerous business development opportunities. Also provided key role in sales opportunities ranging from $50,000 to multi-million dollar opportunities for products and services. • Design, develop and implemented a strategic PKI audit and risk assessment security practice utilizing ISO/IEC 17799, BS 7799-1, Common Criteria, PCI, NIST, WebTrust and ABA standards.• Instrumental in the design and execution of PKI crypto key signing ceremonies, crypto key transport, crypto key storage and directory services (LDAP, X.500).• Perform billable audit, compliance, security, data center assessments, CP and CPS consulting work as needed.• Design, architect and install certificate and registration authorities, Certificate Policy (CP) and Certificate Practice Statements (CPS) documents, Secure-ID, RSA KEON CA, Sentry CA, testing and prototyping of cryptographic applications and general e-commerce functionality (firewalls, routers, DMZ, dial up, LAN, WAN, wireless).• Key member and Compliance Officer for the strategic PKI managed outsourced service to provide hosting for PKIs.• Perform assessment reviews of strategic partnerships, customers and clients. • Design, develop and implement an SSL authentication and browser root chaining service similar to Verisign and Baltimore Technologies.• Perform e-commerce, security and audit risk assessments to identify operational risks.• Design, architect and install certificate and registration authorities, CP and CPS documents, testing and prototyping of cryptographic applications and general e-commerce functionality (firewalls, routers, DMZ, dial up, LAN, WAN, wireless)

Responsible for development of new disaster recovery and business resumption plans, testing and implementation. Also, responsible for all logical and physical security for the corporate headquarters and 17 remote offices. • Member of the Senior Management Team responsible for recommending and implementing new strategic technologies.• Developed design specifications for data center relocation and expansion. • Member of the Corporate Internet Steering Committee and Director on the Security and Disaster Recovery sub-committee.• Member of the Operational Support Planning Committee.• Perform consulting duties to other departments (security, system audits, operations, networking, tech support, data center facilities)

Charlotte, Nc, Us

Core management committee member on multiple projects ensuring Audit considerations such as security, process flows, change control, perform quality assurance analysis on current legacy systems and new projects, mainframe/server, disaster recovery, year 2000 compliance and hardware/software platforms meet specifications as specified by the Technical Architectural Committee. • Review and understand business process flows to ensure compliance with strategic company goals. • Design, architect and install bank certificate process and PKI, CP and CPS documents, e-commerce infrastructures, auditing, testing and prototyping of cryptographic applications. • Design and review of security infrastructure. • Also performed data center assessments and reviews of acquired or partnering companies for merger and acquisitions department.• In charge of staff responsible for review and documentation of business process flows. Utilize this information to formulate recommendations to senior management for improvements and/or strategic decisions.• Consulted with transition team for NationsBank and Bank of America merger to include data center and security infrastructure.• Committee member and sub-author of the corporate digital certificate policies and procedures (CP and CPS).• Appointed Digital Certificate (X.509) key signing witness and root secret key shareholder (1 of 8 officers) for Corporate Security.• Performed penetration tests and TCP/IP traffic sniffing on US and London firewalls and DMZ servers using tools such as ISS (Internet Security Scanner and RealSecure) and Observer

Columbus, Ga, Us

Responsible for performing audits and security assessments on MVS, UNIX, NT, IBM ES-9000 and TANDEM mainframes for largest credit card processing infrastructure

Columbus, Ga, Us

• Communication Engineer• MVS / VM System Programmer• Operations Support Analyst• Responsible for the 24x7 data center operations center (physical and personnel).• Designed, built and migrated a new 110,000 square foot data center.• Member of Corporate Emergency Disaster Recovery Team. • Maintenance and review of security infrastructure (firewalls, routers, DMZ, dial up, LAN, WAN)• Coordinate disaster recovery policies, procedures and tests