Module 0 - Lesson 2 - PolicyWizard instructor introduction
I would like to take a couple of minutes to talk about my background and key experiences that make me the right person to teach you how to develop great security policies.
I'm a veteran of the British Army, having served for 9 years. I deployed on operations to Kosovo, Kuwait and Iraq.
I've previously been a wildlife tracker and survival instructor. My experiences took me to South Africa, to train with one of the world's most senior trackers. When I was there, I learned about anti-poaching methods used in conservation. These techniques are being used daily in the protection of species, including Rhino and Leopard.
Back here in the UK, I worked as a bouncer and security officer before being promoted.
Once promoted I ran, a small team of CCTV operators and security officers, where we monitored the behaviour of our venue visitors and reacted to prevent any incidents of violence or public order disturbance.
This role required an understanding of the UK Data Protection Act, and it sparked my interest in the information security and privacy industry.
While in this role, I began my training gaining a HNC in cyber security, Security+ and ISO 27001 foundation.
In several interviews for GRC roles, I was overlooked as other candidates had more experience in the industry. So I took ownership of my lack of experience and started my own consultancy. I provided services to small businesses writing their security policies and carrying out a gap analysis. Working with the Cyber Essentials framework and ISO 27001.
Using this experience was key to landing my current role.
I was snapped up by Infor as a Security Analyst (Policy and Procedure writer).
They are a massive software development company working in the SAS cloud ERP industries.
My duties include ownership of over 50 policies. I developed new ones regularly, and I ensure policies are reviewed, approved and published within the lifecycle of policy development.
I carry out Security Awareness Trading activities, write blogs and build courses.
I work on the Phishing Remediation Team, investigating suspicious emails, and I do a lot of work with Security Risk.
Having years of experience writing policies within the military and during my time with Infor, I have gained a great deal of knowledge that I want to share with you.
We've all read some terrible policies. Long-winded, boring, and written by robots. Well, my goal is to build an army of writers who know some great ways of developing policies that are engaging, snappy and effective.
To do that, I've launched PolicyWizard.
There will be online courses and policy templates and I will even write policies for other businesses on a contract basis. Eventually, I would like to have a team of PolicyWizards who I can collaborate with and bring great security policies to the masses.
Thank you for taking your first steps towards becoming a PolicyWizard by taking this course.