Hi, I'm Mike

With over 15 years of experience I am a Certified Information Systems Security Professional (CISSP) and have a background in UNIX system administration and web & cloud technologies. I have designed, implemented and supported many complex technical solutions for some of Australia’s largest business names adhering to their strict security compliance requirements.

Focusing on Information Security, I have extensive skills in implementing and managing an ISO/IEC 27001 compliant Information Security Management System, as well as having designed and assisted the implementation of a PCI DSS 3.2 compliant cloud hosting environment built upon a containerised OpenStack environmemnt, including deploying and supporting IDS/IPS, SIEM, and Vulnerability Scanning software. I have developed operational Information Security policies and procedures, and I have managed a team of over 10 technical resources including Platform Specialists and Solutions Architects.

I have experiences assessing the cybersecurity maturity and capability of many local and federal government departments with a focus on the SACSF, ISM, ISO27001, NIST, APRA CPS234 and other various cyber frameworks. Additionally I have created multi-year cybersecurity strategies for large organisations, higher education providers, and local government agencies, and have assissed with the implementation of many cyber related initiatives including governance, risk, incident response, cloud security and network security.

Most recently I have focused my security skills in the area of Digital Forensics and Incident Response (DFIR) where I am able to use my deep technical knowledged paired with my specialist security skills in responding to cyber incidents, as well as engaging in meaningful proactive services designed to minimise the impact and duration of a cyber incident.

My motto is "do it once, do it right, and use it everywhere". I believe that you should measure twice, cut once, and template & automate everything.