Rory Alsop

Scotland, United Kingdom

Age: 43

Information Security, Risk and Governance Specialist.

Heavily involved in information security and risk solutions for the last 16 years in the UK, US and throughout Europe.

  • Scottish Chairman of the Institute of Information Security Professionals
  • Immediate Past President of ISACA Scotland
  • Full Member of the IISP (M.Inst.ISP)
  • Security mentor and evangelist
  • Moderator of the Security, Music, Outdoors, Video Production, Sound Design and Personal Productivity Stack Exchange sites and Administrator for the Security Stack Exchange Blog
  • Contributor to the Open Web Application Security Project (OWASP)
  • EC Council Certified Chief Information Security Officer (C|CISO)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified in Risk and Information Systems Controls (CRISC)

  • have also been a member of the Standards and Operations Committees for the Council of Registered Ethical Security Testers (CREST), an ISC2 Certified Information Systems Security Professional (CISSP) and a CLAS Consultant.

Extensive experience in Enterprise Risk and Security, from a deep technical grounding in application, network and platform security, as well as over 10 years working with global banking clients helping them identify, evaluate and mitigate information risks from a business and governance perspective.

Key roles in integration programmes, aligning security policies and business risk appetites across divisions in order to provide pragmatic security solutions.

Has created security development pathways and managed large scale security programmes, including global attack & penetration engagements, privacy and security assessments, incident response and fraud and forensic investigations.

Core clients have included global and UK banks, government departments as well as organisations in the Energy, Telecomms and other markets.

Acts as a mentor and coach for numerous security professionals in Scotland, providing career guidance as well as promoting a passion for the industry.

Provides subject matter experience at both strategic and technical levels, defining, reviewing and assessing enterprise level information security strategy, policies and standards for clients, incorporating the ISO 27000 series, COBIT, ITIL and other industry recognised baselines.

Presented at the inaugural e-Crime Scotland Summit and presents regularly on aspects of Information Security at various events in the UK, especially on the business implications of security issues.

Published in the Financial Times, ISACA Journal, assisted in the production of ISACA's APT white paper, and various other publications.

comment Webistes listing email address lists for spammers
While this is the sort of thing that you could ask over on [chat] it doesn't make a good question here.
reviewed Close How can I Run my Kali Tools on a Remote Server
reviewed Close DNS Amplification attacks
reviewed Close Please help me to find the Hash algorithm and decrypt the password
reviewed Close /etc/httpd/conf/httpd.conf and /etc/httpd/conf.d/owncloud.http /Directory directives
reviewed Close LFI Waf Bypassing help
comment Should an enterprise disable Google Chrome auto-update?
RQ - this is off topic on meta, but it's going to be closed if I migrate to main anyway, as it is entirely opinion based - both answers could be correct depending on your risk appetite, threat model etc.
answered If a question is posted to one site and receives answers, can it be changed to a different site?
reviewed Reviewed How do I fix the latency issue when recording through M-AUDIO Fast Track Pro USB Audio Interface?
comment How do you calculate the effects of precession on elliptical orbits?
You can delete your final paragraph and ask that as a separate question in meta.
comment Why does Earth enjoy a significantly longer lifespan than Mars or Venus?
This question doesn't make any sense. The planets have all 'survived' but there are no planets that are alive - there is no usual sense. Can you clarify what you mean.
comment Where is the explicit statement to bar malicious/illegal hacking questions?
Dan - you're entirely missing @Iszi's point. Why do you think you can identify someone's motives across the internet and deny them a research route? I know many of the Security Stack Exchange folks - and they range across professional pen testers, undergraduates in ethical hacking, forensics guys, risk and control folks, enthusiastic amateurs, managers of large security teams in global enterprises etc. Sure, there may be a couple I'd have my personal doubts about, but there is no way to prove either way. So let's not deny the fact that people use the SE sites as an awesome research tool!
reviewed Close Humans surviving in space
reviewed No Action Needed Given multiple audio files, can I extract background music that has different sound effects over it?
reviewed Reviewed Microphone Input Playback (FMOD STUDIO API)
reviewed Reviewed Distort voice with free software?
comment How to connect 1/4" audio jacks to my current setup
I agree that it seems a bit on the edge of our scope, but it is not about music!
comment How to trace a (mobile) phone?
Why should the public be allowed to trace individuals? No - that would be very scary - it makes stalking, bullying and threats very easy.
reviewed Reviewed What can I do to give my lawn mower more power?
reviewed No Action Needed Honda Civic 2002 - Car won't start; electrical system issue suspected
1 2 3 4 5