Web Based Commerce Course (13 March 2007)
In week 10, we shall be having a guest speaker.
Paul Swarbrick has been working in the information security and risk industry
for over 15 years. His career has spanned multiple industry sectors including
finance, insurance, logistics, military, medical and Government during his
many years in blue chip consultancy.
Paul has specialised in the management of information assurance, audit,
compliance and security, and is recognised as an industry figure in the field.
Over the last 10 years he has spoken at most of the major conferences on the
subject, including speaker and workshop leader at Baptie Net Focus
Conference (UK), main speaker for Security Networking, Stockholm, speaker
at European Financial Management Conference in Paris, keynote speech on
risk management at IT Security Europe Conference, Munich, speaker at
COMPSEC Directors briefing in London on the Management of Business Risk
and the Keynote Management briefing for International Virus Bulletin
Conference. In addition, he has given interviews, written magazine articles
and participated in material planned for use on BBC Radio 4 and BBC2.
Paul was the senior security architect for the new national NHS data systems,
the security advisor to the introduction off the biometric passports facial
recognition systems, SOX compliance programme manager to Prudential and
currently holds the position of Programme Manager for the Home Office
Scientific Development Branch (HOSDB) where he is responsible for
managing a national programme of work, delivering a number of security
detection and CCTV surveillance projects.
Paul also holds the role of non-executive director on the executive board for
Worthing and Southlands NHS Trust. This part-time appointment, made by
the National Appointment Commission for the NHS requires him to ensure the
governance of the trusts operations and considerable budget, with key
assurance and compliance responsibilities at the highest level of management
for the organisation.
Outline of talk
Introduction and career history
• Discussion of the various roles and positions Paul has held. The pros and the
cons to each, and the best skills to have to obtain similar jobs.
Business Requirements
• Where and from whom should security requirements be gathered from? How
little IT really matters in what the business does and why its important to
understand what happens beyond your own desk.
