He has been involved with “Cyber Security” (and its various predecessor terms!) for most of his career, in a variety of roles including Incident Response / Investigation; Policy Development; Research and Technology Management; Security Architecture; and Systems Accreditation; and for a variety of organisations including the Cabinet Office; Defence; the National Archives; and Policing. In addition to his status as a government Principal Subject Matter Expert (SME), he is also a member of the government Programme and Project Management (PPM) specialism.
In the context of Trustworthy Software, he was intimately involved with various precursor activities of TSI, including leading the original Cabinet Office – Central Sponsor for Information Assurance (CSIA) study on Secure Software Development (SSD), being the Technical Manager for the Pilot Operation of the CSIA (now CESG) Claims Tested Mark (CCT Mark) Scheme, contributing to the Technology Strategy Board (TSB) Cyber Security Knowledge Transfer Network (CSKTN) Special Interest Group (SIG) on Secure Software Development, and finally leading the Secure Software Development Partnership’s (SSDP) SIG on Standards.
In the wider context, he helped found the National Information Assurance Forum (NIAF – formerly “GIPSI”), was lead Information Security specialist for the recent European Commission (EC) funded MS3i and NEISAS Projects, and is heavily involved with Standardisation, as detailed in the External Committee section. Anyone interested in assisting with UK input to Standards is welcome to get in touch.
He is also a frequently invited speaker at a variety of conferences in both the UK and internationally.
Membership of external committees
Membership of professional associations and societies