Rory Alsop

Scotland, United Kingdom

Age: 43

Information Security, Risk and Governance Specialist.

Heavily involved in information security and risk solutions for the last 16 years in the UK, US and throughout Europe.

  • Scottish Chairman of the Institute of Information Security Professionals
  • Immediate Past President of ISACA Scotland
  • Full Member of the IISP (M.Inst.ISP)
  • Security mentor and evangelist
  • Moderator of the Security, Music, Parenting, Outdoors, Video Production, Sound Design and Personal Productivity Stack Exchange sites and Administrator for the Security Stack Exchange Blog
  • Contributor to the Open Web Application Security Project (OWASP)
  • EC Council Certified Chief Information Security Officer (C|CISO)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified in Risk and Information Systems Controls (CRISC)

  • have also been a member of the Standards and Operations Committees for the Council of Registered Ethical Security Testers (CREST), an ISC2 Certified Information Systems Security Professional (CISSP) and a CLAS Consultant.

Extensive experience in Enterprise Risk and Security, from a deep technical grounding in application, network and platform security, as well as over 10 years working with global banking clients helping them identify, evaluate and mitigate information risks from a business and governance perspective.

Key roles in integration programmes, aligning security policies and business risk appetites across divisions in order to provide pragmatic security solutions.

Has created security development pathways and managed large scale security programmes, including global attack & penetration engagements, privacy and security assessments, incident response and fraud and forensic investigations.

Core clients have included global and UK banks, government departments as well as organisations in the Energy, Telecomms and other markets.

Acts as a mentor and coach for numerous security professionals in Scotland, providing career guidance as well as promoting a passion for the industry.

Provides subject matter experience at both strategic and technical levels, defining, reviewing and assessing enterprise level information security strategy, policies and standards for clients, incorporating the ISO 27000 series, COBIT, ITIL and other industry recognised baselines.

Presented at the inaugural e-Crime Scotland Summit and presents regularly on aspects of Information Security at various events in the UK, especially on the business implications of security issues.

Published in the Financial Times, ISACA Journal, assisted in the production of ISACA's APT white paper, and various other publications.

reviewed Close How does Amazon Fire TV know my name/account?
reviewed Approve suggested edit on Is it possible for malware to be in the BIOS or in hardware?
revised Odometer gained 65,000 miles after battery replacement
deleted 32 characters in body
answered What's wrong with this question?
comment Migration flag is limited to a very short SE sites list, why?
Also, that is what folks do when they want a migration to another site. The process seems to work well across the whole network
comment Migration flag is limited to a very short SE sites list, why?
Stats are mod only I'm afraid. And from being a mod on various sites I can say it would be a nightmare from a quality management perspective. On some sites I could see the argument for having maybe up to 5 choices, but it would cause so many problems for mods to clean up later.
comment WPA vulnerabilities for pentest
SSID is not a secret.
comment I accidentally kept my vehicle Choke ON while riding?
Yep - I'd suggest that is included in 'engine'
awarded Popular Question
comment Encryption and decryption of plain text using stream cipher algorithm
SMIT - I see all your questions so far have been closed. You should probably re-read our [about] page. Also have a look at Cryptography Stack Exchange, which may be more suited to some of your questions.
comment I need help for information on my acoustic guitar
I'm voting to close this question as off-topic because it is not about Music practice or theory. Sorry - we don't do instrument identification questions.
answered I accidentally kept my vehicle Choke ON while riding?
comment Would "one cylinder's out" semantics include a head gasket?
Also voted to close as opinion.This question isn't about motor vehicle maintenance.
revised I find myself lacking motivation to study
deleted 16 characters in body; edited title
comment Migration flag is limited to a very short SE sites list, why?
I can think of two reasons: the vast majority of sites will never be appropriate destinations; it's really not that big a problem
awarded Enlightened
awarded Nice Answer
comment WPA vulnerabilities for pentest
SSID has no bearing on difficulty of attack. The question is not about passwords. It is about pen testing WPA.
comment why are passphrases not the standard
it is effort that an attacker would go to for a desirable target - that may not be the normal user, who may just be a useful vector because their protection is weak
comment The Memes of Information Security
darn it - Universal Greeting Time removed from Wikipedia
1 2 3 4 5