A Risk and Security Summary

Craig has personally conducted and managed in excess of 1,600 IT security related engagements for more than 180 Australian and international organizations in the private and government sectors.

These engagements have comprised of:

• Security systems design
• IT Audit
• Systems implementation
• Staff training and Mentoring
• Cross functional Team Development
• Policy and Procedural development,
• Business Process Analysis
• Compliance and Risk

In addition to his consulting engagements Craig has also authored IT security related books and articles as well as designing the architecture for the world’s first online casino (Lasseter’s Online) in the Northern Territory. He has also designed and managed the implementation of many of the systems that protect the Australian Stock Exchange.

He has very strong skills in TCP/IP, Unix (Solaris, Linux and BSDI), Windows NT/2000/2003, Citrix, Netware, Internet and Intranet Technologies (Web Servers, FTP Servers, Mail Relays, DNS and News Servers) IT Security (Firewalls, Routers, Intrusion Detection systems, User Activity Monitoring systems, Policy and Procedural development, and Incident Response Handling.), and Remote Access Methods (Direct Dial, Dial Connect and Internet based VPN Solutions).

Craig developed and implemented the security policies and procedural practices within Mahindra and Mahindra, India’s largest vehicle manufacturer. The Mahindra group employee over 50,000 people in total and has numerous business interests from Car to Tractor manufacture, through to IT outsourcing.

Craig has successfully completed the following engagements:

• Security risk assessments, (Based on HIPAA, AS/NZS 4360 and various sections of the financial services legislation),
• Project managed the implementation of a secure remote access and token authentication system and group within News Ltd,
• Implemented and lead a project to design and deploy ISO 17799 aligned policy and procedures within numerous companies both in Australia and Internationally through a consultative process.
• Developed ISO17799 and AS/NZS 4360 audit and review frameworks for CUSCAL (Credit Union Services Corp Aust. Ltd).
• Completed several cross departmental risk based assessments within the Australian Stock Exchange.
• Was deputy chairman on several government telecommunications working sub-committees
• Has produced academically published papers on IT, Mathematics, HR and Business Strategy