ABSTRACT
The emergence of two key cybersecurity management domains in Critical Infrastructure and Operational Technology has provided a significant increase in the ability to plan, detect and respond to threats. These are Vulnerability Management and Threat Management. However, the story can’t stop there. The job isn’t done. Senior management who make the business decisions still suffer from the context gap and lack of visibility of what is truly happening in their business in their terms. How do we bridge that gap and connect the parts of the business together, top to bottom, from technology to the actual real physical business operations? So that cybersecurity actions and reactions are quantified with common business language and aligned with business risk management principles.

BIOGRAPHY
Michael is both a technologist and a business leader. He has worked for startups and large corporations alike, including senior executive roles at Oracle and most recently Symantec where he ran the consulting and cyber security services businesses for EMEA, Asia Pacific and Japan. He was the field CTO at both Oracle and Symantec for a number of years where he drove large customer transformation engagements. This was across financial services, mining and resources, society scale government and telco where large scale security, applications, development and systems infrastructure, and business process integration was required. Michael is comfortable across the entire stack from applications domains such as CRM, HCM, ERP and Manufacturing through to the data management, infrastructure and networking layers. Through all his recent engagements the consideration of options and transition to cloud has been a key element, the multiple aspects of cyber security as well as the software engineering needed to build new capabilities. Michael especially enjoys directing his customer benefit focus into community based industries and the critical infrastructure sector that plays such a huge and important role in the world we live in.