Curriculum Vitae of Craig S Wright

The Main CV Page

2008-12-04T21:10:00.002+11:00

I also have a LinkedIN Profile that holds many of my details. This page is the primary link to the various sections on this site.

This site is divided into a number of sections and links designed to best use the power of the web to disseminate information quickly and effectively.

As such, I have divided this site into a number of sections. As I have a large number of interests and my focus crosses many professional boundaries, I have setup a separate section for each of the key areas I am involved with. These include separate "main" pages for each of the following areas:

I have personally conducted and managed in excess of 1,800 engagements for over 180 Australian and international organizations (in both the private and government sectors).

These engagements have comprised of:

Algorithmic design
Systems implementation
Staff training and Mentoring
Cross functional Team Development
Policy and Procedural development,
Process Analysis
Compliance and Risk
Research

University / Academic

2008-12-01T20:08:00.000+11:00

This page details my university degrees and studies. I have not included the complete list of qualifications at present.

Education

2008-11-04T20:10:00.000+11:00

This section is divided into two parts:

In the University section, I have listed and detailed my academic pursuits. This details the Universities I have attended and the studies I have completed or am currently working towards.

The industry section details my certifications and industry acreditations. These include IT certificates, Forensic societies and other such accreditations.

An Introduction

2008-10-23T18:49:00.002+11:00

I am the only GSE in the southern hemisphere, I am qualified in Banking and finance law and I also hold a Masters degree in Law (LLM) and am completing a Masters Degree in Statistics from the University of Newcastle. I have both the GSE-Compliance and GSE-Malware certifications making me the only individual at this time to have completed multiple GIAC platinum level certifications.

I have managed both large and small teams and have built a team from nothing to take the company to a listing.

I am a published IT security author. A link to my books is included on this site. I presented at Sept at IT Security World 2008 and shall be presenting again at MISTI in 2009. The 2008 presentation is on Document retention and compliance internationally. See pages 4 and 6 of http://www.misti.com/PDF/174/23693/ITSW08_s.pdf for details. I also have published articles on this topic with the British Computer Society and the IIA.

I am co-authoring the CISSP/ISSMP guide on Compliance. I have authored "THE IT REGULATORY AND STANDARDS COMPLIANCE HANDBOOK" with Elsevier (http://www.elsevier.com/wps/find/bookdescription.cws_home/714704/description#description).

I worked to design Security systems for the Australian Stock Exchange and the broker network. I also designed Lasseter’s OnLine and brought them online to be the first licensed casino. I currently work extensively with Sporting Bet and Centrebet with respect of system design, audit and strategy.

My mobile is +61 417 683 914.

I currently hold the largest number of SANS/GIAC security accreditations globally and am the first person to achieve the GSE specializing in Compliance. I have a Masters degree in Management and a couple in Info Tech. With the exams in Las Vegas at SANS NS2008 I became the first person to have achieved more than one GSE and completed the GSE-Malware certification.
http://www.giac.org/certifications/gse.php
http://www.giac.org/certifications/gse-compliance.php
http://www.giac.org/certifications/gse-malware.php

I am one of the most highly technical security specialists available at the same time. I have extensive experience with US compliance requirements and have consulted with a number of international firms with regards to DRM, IP and SOX. I am a technical director with the SANS institute.

I am one of the co-authors for Syngress’s “The Official CHFI Study Guide” and a number of other books and papers.

I also currently hold following positions:

• Trustee, Uniting Financial Services Trust Fund where I help oversee a 5 billion dollar financial trust,
• Ecommerce Department Board Member, Charles Stuart University,
• Academic Committee, SANS Technology Institute.
• Vice President, Australia - Asia Pacific Operations, Whitehat Conference.

Please have a look at the attached links for further information:

http://www.cio.com.au/index.php/id;1211013697
http://www.infoage.idg.com.au/index.php?id=1151410747
http://www.storefrontbacktalk.com/story/080505securityaudits.php

I have completed work under the attorney general’s CVNA (Critical Network Vulnerability Assessment) Program and am contracted to several chapters of a book being released next year on “Critical Infrastructure Protection”.

I am a SANS Instructor with the Stay Sharp Program and a SANS Mentor:
http://www.sans.org/staysharp/details.php?id=7156
http://www.sans.org/staysharp/details.php?id=7161
http://sans.org/mentor/details.php?nid=7316

I have a published paper on ISO 17799, completed my LLM (International Commerce law) with a dissertation on “Internet Intermediary liability” where I was awarded the degree with a commendation. I have a number of years experience in a professional services firm (BDO is a mid tier Chartered Accountancy).

I am experienced in Trade and Finance law and Banking Law.

Publishing

2008-10-04T20:20:00.000+10:00

I have been involved with authoring books, papers and conference presentations for a number of years. I am a member of the International Federation For Professional Speakers and speak at between 6-8 conferences annually (both domestic and internationally).

This section is divided into two (2) primary sections. These are:

In the section on Books, I have listed the books I have worked on. This includes both my own book as well as those that I have co-authored.

The Papers section is a list of the main papers I have published as well as conference presentations that I have given. This includes a list of papers from Springer's LNCS through to marketing journals.

In addition, I have worked on the SANS Top 20 list in 2007 and 2008. I have also written and developed courseware for a couple of universities to a Masters level.

Industry Qualifications and Certifications

2008-10-04T09:58:00.000+10:00

This page lists many of the industry certifications that I hold. This is an area that changes rapidly for me as I add new certifications so I shall endeavor to ensure that this page remains current to within 3 months.

SANS / GIAC
The linked page is where I maintain a list of the certifications I hold from SANS and GIAC. Each of these may be verified for authenticity on the GIAC site.

GSE-Compliance # 0001 [Platinum] GIAC Security Expert - Compliance (GSE-Compliance)
GSE-Malware # 0022 [Platinum] GIAC Security Expert - Malware (GSE-Malware)
GSE - I plan to sit this exam in 2009.

The detailed page which lists my complete set of GIAC certifications is located here.

Microsoft
I hold the following Microsft certifications (as well as being an MCP).

MCSA # 3062393 Microsoft Certified Systems Administrator
MCSE # 3062393 Microsoft Certified Systems Engineer
MCSE # 3062393 Microsoft Certified Systems Engineer (Mail)
MCSE # 3062393 Microsoft Certified Systems Engineer (Security)
MCDBA # 3062393 Microsoft Certified Database Administrator

I have completed training in Windows 2000 and 2003 Server, NT4.0, XP, Vista, MS SQL 2000 and 2005.

ISC 2
In addition to holding the following certifications from ISC2, I am the co-author of the Official (ISC)2 Guide to the CISSP(R)-ISSMP(R) CBK.

CISSP # 47302 (ICS)2 Certified Information Systems Security Professional
ISSMP # 47302 (ICS)2 Information Systems Security - Management Professional
ISSAP # 47302 (ICS)2 Information Systems Security - Architecture Professional

ISACA - IS Audit and Control Association

CISA # 0542911 - Certified Information Systems Auditor
CISM # 0300803- Certified Information Security Manager

Checkpoint

CCSA - Checkpoint Certified Security Administrator
CCSE - Checkpoint Certified Security Expert

I am certifed in Checkpoint NGX-R65. In addition to this, I co-authored the Check Point NGX R65 Security Administration Guide from Syngress. This title is a continuation of Syngress' best-selling references on Check Point's market leading Firewall and VPN products.

CISCO

CCNA (CISCO Certified Network Analyst) # 11475583 (CSCO#)

Other

I helped co-author the CHFI (Computer Hacking Forensic Investigator) official handbook through Syngress. This is the official handbook for the CEH Forensic computing course and certification.

CCE # 480 ISFCE - Certified Computer Examiner
ISSPCS # 051 International Systems Security Professional Certification Scheme

I have other certifications that I have not listed here (from Security+, Nortel, Novel certifications etc.). These shall be added in time.

Memberships

MIEEE # 87028913 Member IEEE
MACM # Member ACM
AFAIM # PM133844 Associate Fellow Australian Inst. Management
MACS(Snr) # 3015822 Senior Member Australian Computer Society
ISSA - Information Systems Security Association
ISFCE - The International Society of Forensic Computer Examiners

EUCP Certified (Documentary Letters of Credit under UCP 500)

In addition to this, I have completed the following Trade/Other Qualifications

Motor Mechanic (standard engines)
Chef (French Provincial)
Piano (Intermediate, Classical/Jazz)

GIAC Certifications

2008-08-04T12:01:00.007+10:00

The following page is where I maintain a list of the certifications I hold from SANS and GIAC. Each of these may be verified for authenticity on the GIAC site.

There are three (3) certifications levels with GIAC. These are Silver, Gold and Platinum.

The Silver certification is (generally) based on a single 4 hour exam.
A Gold certification requires that the Silver certification is held and then a paper is published on a topic related to the particular field. This paper is assessed on a merit basis.
The Platinum level of Certification is the pinnacle of GIAC (and for that matter IT Security) industry accreditation. My goal is to achieve all three.

I have included my certificate number for verification purposes alongside each of the certificates I hold.

Platinum Level Certifications

GSE-Compliance # 0001 [Platinum] GIAC Security Expert - Compliance (GSE-Compliance)
GSE-Malware # 0022 [Platinum] GIAC Security Expert - Malware (GSE-Malware)
GSE - I plan to sit this exam in 2009.

Gold Level Certifications

GSEC # 10506 GIAC Security Essentials Certification (GSEC)
GCIH # 06896 GIAC Certified Incident Handler (GCIH)
GCIA # 02913 GIAC Certified Intrusion Analyst (GCIA)
G7799 # 0039 GIAC Certified ISO-17799 Specialist (G7799)
GCFA # 0265 GIAC Certified Forensics Analyst (GCFA)
GSNA # 0571 GIAC Systems and Network Auditor (GSNA)
GLEG # 0006 GIAC Legal Issues (GLEG)

I have a GCUX gold paper in progress. This should be complete in Jan 2009.

GCUX # 0587 GIAC Certified UNIX Security AdministratorSilver Level Certifications

Silver Level Certifications
I hold the following GIAC Silver certifications/Certificates.

GCFW # 01891 GIAC Certified Firewall Analyst (GCFW)
GCWN# 01234 GIAC Certified Windows Security Administrator (GCWN)
GAWN #00894 GIAC Assessing Wireless Networks (GAWN)
GHTQ # 0368 GIAC Cutting Edge Hacking Techniques (GHTQ)
GLFR # 0016 GIAC Law of Fraud (GLFR)
GSLC # 02178 GIAC Security Leadership Certification (GSLC)
GREM # 0586 GIAC Reverse Engineering Malware (GREM)
GSAE # 0141 GIAC Security Audit Essentials (GSAE)
GPCI # 0086 GIAC Payment Card Industry (GPCI)
GSPA # 0101 GIAC Security Policy and Awareness (GSPA)
GLDR # 0101 GIAC Leadership (GLDR)
GWAS # 0535 GIAC Web Application Security (GWAS)
GIPS # 0036 GIAC Intrusion Prevention (GIPS)
GNET # 0126 GIAC .Net (GNET)

I have also completed the following Stay Sharp Courses/Exams:

SSP-MPA # 0416 Stay Sharp Program - Mastering Packet Analysis (SSP-MPA)
SSP-GHD # 0246 Stay Sharp Program - Google Hacking and Defense (SSP-GHD)
SSP-DRAP # 0171 Stay Sharp Program - Defeating Rogue Access Points (SSP-DRAP)

In addition, I have a number of retired courses that are now incorporated into other GIAC certifications.

The GLEG Certificate Incorporates:

GIAC Contracting for Data Security (GCDS)
GIAC Business Law and Computer Security (GBLC)
GIAC Legal Issues in Information Technologies (GLIT)

SANS Mentor and Stay Sharp Instructor

I have also acted as a mentor and stay sharp instructor for SANS. In this capacityI have taught the following courses:

Auditing Networks, Perimeters & Systems, AUD-507
Google Hacking and Defense, SEC-550
Mastering Packet Analysis, SEC-452

In addition, I am scheduled to sit the following exams in the next few weeks:

GCPM -GIAC Certified Project Manager Certification (GCPM)
CSSP-C - GIAC Secure Software Programmer - C (GSSP-C)