Rory Alsop

Scotland, United Kingdom

Age: 43

Information Security, Risk and Governance Specialist.

Heavily involved in information security and risk solutions for the last 16 years in the UK, US and throughout Europe.

  • Scottish Chairman of the Institute of Information Security Professionals
  • Immediate Past President of ISACA Scotland
  • Full Member of the IISP (M.Inst.ISP)
  • Security mentor and evangelist
  • Moderator of the Security, Music, Outdoors, Video Production, Sound Design and Personal Productivity Stack Exchange sites and Administrator for the Security Stack Exchange Blog
  • Contributor to the Open Web Application Security Project (OWASP)
  • EC Council Certified Chief Information Security Officer (C|CISO)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified in Risk and Information Systems Controls (CRISC)

  • have also been a member of the Standards and Operations Committees for the Council of Registered Ethical Security Testers (CREST), an ISC2 Certified Information Systems Security Professional (CISSP) and a CLAS Consultant.

Extensive experience in Enterprise Risk and Security, from a deep technical grounding in application, network and platform security, as well as over 10 years working with global banking clients helping them identify, evaluate and mitigate information risks from a business and governance perspective.

Key roles in integration programmes, aligning security policies and business risk appetites across divisions in order to provide pragmatic security solutions.

Has created security development pathways and managed large scale security programmes, including global attack & penetration engagements, privacy and security assessments, incident response and fraud and forensic investigations.

Core clients have included global and UK banks, government departments as well as organisations in the Energy, Telecomms and other markets.

Acts as a mentor and coach for numerous security professionals in Scotland, providing career guidance as well as promoting a passion for the industry.

Provides subject matter experience at both strategic and technical levels, defining, reviewing and assessing enterprise level information security strategy, policies and standards for clients, incorporating the ISO 27000 series, COBIT, ITIL and other industry recognised baselines.

Presented at the inaugural e-Crime Scotland Summit and presents regularly on aspects of Information Security at various events in the UK, especially on the business implications of security issues.

Published in the Financial Times, ISACA Journal, assisted in the production of ISACA's APT white paper, and various other publications.

comment Travel instruments: what are the smallest and lightest?
List questions are almost always unsuitable for Stack Exchange.
reviewed Excellent Why the non-symmetric design of rocket nozzles?
reviewed Excellent Can a launch-provider determine from the flight-profile the payload shall be in the wrong orbit?
reviewed Satisfactory Stability of Lissajous orbits around Sun-Venus L1
comment Minimal length required for a human to register a sound
Jessica - you keep saying this, but what do you mean?
comment Harnessing energy from space
Raj - your question cannot work, as it asks about unthought of methods. How do you expect that to be answered. That said, LocalFluff is entirely wrong: the earth has a very finite reserve of energy and it is being used up fast. I'd we don't sort out sources of energy from off Earth, we are stuffed pretty soon.
comment Advice - When just starting your career, what are the best certifications to eyeball?
CISSP is really not for management. It is generally considered a reasonably broad but shallow cert suitable for junior security folks a few years into their career. Have a look at my blog post on…
comment Might Oort cloud comets be exchanged between solar systems?
That's a good find. I'll need to edit and clean up my contents.
reviewed Leave Closed How does ASIC cryptocoin miners affect the security of scrypt?
reviewed Close CVE-2014-4113 Proof of Concept Code?
reviewed Close How to determine possible encryption type of a given data
reviewed Close Facebook full IP log
reviewed Close Fastest dictionary attacker?
reviewed Close If a large companies website's robots.txt file has no Disallow section, does this mean I am free to write code to crawl their website?
comment "Tips to Improve Focus and Attention to Details............."?
Jan is absolutely right. If you look on this site you will see many posts on this.
revised Gmail, Yahoo, Hotmail , and so on; How do they check the content of an attached password-protected archived file like Winrar?
we don't need the spammy link
comment Advice - When just starting your career, what are the best certifications to eyeball?
Pretty certain we have a dupe, but in any case this is opinion based.
comment Can we add Cryptography as a migration target?
Ahh - 4 plus meta. I had that wrong. But yes, we can't have beta sites in our list.
comment Can we add Cryptography as a migration target?
We only get three, and the ones chosen are from our statistics on moves. It is easy to flag for moving to another site, just let mods know in the reason box, or in a comment.
comment How does ASIC cryptocoin miners affect the security of scrypt?
What is it you are asking? I can't figuree out your question. It may be that it is more on topic at either our bitcoin or crypto sites.
1 2 3 4 5