I founded AA PrivSec Consulting Ltd out of a desire to promote best practice in the domains of information security and information privacy to help ensure businesses are aware of the appropriate solutions (people, process and technology) to achieve a realistic balance of risk/opportunity to enable them to maintain a competitive advantage, navigate a complex and ever changing landscope of regulatory requirements and lower the risks of cyber attacks.
​
I have an extensive background in Information Technology spanning over twenty years and I have been working in the fields of Information Security and Information Privacy for the last twelve years, both as an internal resource and a consultant, including being a qualified PCI DSS ISA working in payment card data security and being involved in a lot of consulting activity prior to the enforcement of GDPR.
​
I like to stay at the cutting edge of knowledge within my field applying the very best practice processes, ensuring that I am able to apply this knowledge and bring extra value to the organisations I work with.
​
I currently hold the following certs:
​
-
Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), Comp TIA Security+
-
ISO27001 Information Security Lead Auditor and Lead Implementer, ISO22301 Business Continuity Lead Auditor, ISO9001 Internal Auditor, ISO27701 Privacy Information System Lead Implementer
-
Payment Card Industry Professional (PCIP)
-
Certified Information Privacy Professional/Europe (CIPP/E), Certified Information Privacy Manager (CIPM)
-
Certificate of Cloud Auditing Knowledge (CCAK), Certificate of Cloud Security Knowledge (CCSK).
​
I am a Fellow of Information Privacy (FIP) and a full member of the Chartered Institute of Information Security (MCIIS). I hold membership with IAPP (the International Association of Privacy Professionals) and IRCA (the International Register of Certified Auditors).
