Who you'd actually be working with.

Chris is a security architect who came up through PwC and BAE Systems before starting this practice — nearly twenty years spent designing and assuring security across financial services, energy and government, in IT and in the operational technology that runs physical things.

Through the practice he has served as interim Head of Information Security at a UK central government department, building a function that challenges the people running the systems without running them itself, reporting to the department's CISO and its board committees. He has assessed a government agency's OT network as a Code of Connection Assessor, and he sits on the two British Standards committees that maintain ISO 27001 — which is a long way of saying he has read the standards more carefully than most people who cite them.

He is a Fellow of BCS and a Chartered IT Professional, a Chartered Security Architect through SABSA, and holds CISSP, CCSP and CRISC alongside an MSc in Information Security from Royal Holloway.

Outside the day job he has spent most of his adult life volunteering with young people, largely through the Scouts — leading a district of a hundred adult volunteers in his twenties, and serving as a trustee since. It's where the habit of asking the awkward question in the meeting, and backing the decision outside it, was learned.