Login to profile

CREST Incident Response Focus Group

Meet our Incident Response Focus Group

Benn Morris,
3B Data Security

Chair of Focus Group & International Council Discipline Representative

Benn is the Managing Director of 3B Data Security, a niche provider of cyber security services, digital forensics, incident response, security training, penetration testing and audit & advisory related services.

Benn started his Digital Forensic Investigation career in a UK Law Enforcement and Counter Terrorism. He has spent 18 years investigating computer crime, hacking investigations, conducting incident response and security assessments; 15 years of this he has been a PCI QSA and PFI.

Peter Bassill,
Hedgehog Security Ltd

Europe Council Representative

With an unwavering commitment to the Information Security realm since 1999 and a comprehensive IT journey dating back to 1996, I bring a distinctive blend of profound technical prowess and strategic business acumen.  My professional journey encompasses a rich history of hands-on experience in information systems operations, network engineering, and information security management.  Notably, my pursuit of excellence has been underscored by a myriad of technical certifications, including the prestigious Certified Information Systems Security Professional (CISSP). Recognized as a community leader in Payment Card Industries Data Security Standards, my dedication to the field was further acknowledged in 2009 when I secured the runner-up position in the SC Magazine’s Information Security Person of the Year.

Currently steering the helm as the CEO of a distinguished Cyber Security firm, I strive to advance technological knowledge and drive positive change not only within my organization but across the broader industry landscape through active participation in governing bodies.  Navigating the complexities of the Cyber Security sector, I foster the development of tomorrow’s leaders and possess a nuanced understanding of emerging technologies’ implications for the broader business environment.

Keith Buzzard,
PGI International

Vice-Chair & UK Council Representative

Keith Buzzard is Chief Technology Officer at Protection Group International. He has a background of leading IR teams resolving incidents within the CNI and advising UK and Foreign governmental entities. He has also developed and delivered IR training along with work contributing to standards within the field.

Protection Group International empowers organisations and nations to counter digital threats. We help organisations build digital resilience by either deploying our people to implement solutions on behalf of clients or we support clients to develop their own capabilities. We have worked with SMEs, corporations, NGOs and governments around the world, in more than 25 languages. We specialise in digital security, digital investigations, and capacity building.

James Gillespie,
Cyberis Ltd

Jack Meersman,
Alvarez & Marsal

Americas Council Representative

Jack is a Manager with Alvarez & Marsal in the Global Cyber Risk Services practice with over 5 years of experience as a technical cybersecurity practitioner. Jack is primarily responsible for managing digital forensics and incident response engagements, with a focus on cloud-native and hybrid cloud infrastructure.

When not on an active response matter, Jack works with clients to proactively improve their cyber defense maturity and incident readiness through tabletop exercises, threat detection automation, purple teaming, and incident playbook development. When not working, Jack enjoys days on the beach with his family, rowing, and building computers.

Jack Rutherford, Triskele Labs

Americas Council Representative

Jack is the Principal Security Consultant at Triskele Labs Global Pty Ltd. He has a wealth of experience in the cyber security industry in Australia, coming from a background in both the public and private sectors. Before committing his expertise to Triskele Labs, he worked in the Vulnerability Management and Research team at the Australian Taxation Office, as well as the Security Engineering and Development team at the Department of Defence.

Since joining Triskele Labs, Jack has led the offensive team and grown this capability from the ground up, starting from just a few people to one of the largest boutique teams in Australia. This has included growth, diversification and maturity of penetration testing, red teaming, intelligence-led testing and adversary simulation. He has also assisted in standing up the Triskele Labs Security Operations Centre capability within Australia.

Jack now looks to measurably contribute to CREST activities in the Australasian region, to assist us in continuing to supply high quality security accreditation and certification programs.

2024 key dates

Upcoming events:

Incident Response Focus Group meeting dates:

  • 25 July 2024, 11am (GMT+1)
  • 3 October 2024, 11am (GMT+1)
  • 5 December 2024, 11am (GMT+1)
CREST Incident Response Certifications CREST Incident Response Buyers’ Guides CREST Incident Response Research