We have been very active in the Americas since the opening of the USA Chapter in September 2016.
CREST Americas is represented and managed by the North America Council comprising elected member representatives. The Chair of the North America Council, when appointed, will also represent the region on our International Council.
CREST America offers programs across six core cyber security stakeholder communities:
• Government
• Regulators
• Buying community
• Service suppliers
• Training and academia
• Professional bodies
It exists to build capability, capacity, consistency and community in the industry working with governments, regulators, buyers and suppliers at home and abroad to develop and support internationally recognized schemes. These goals help to enhance cyber resiliency and open up markets for our member companies in the Americas and opportunities for qualified individuals.
We have a global viewpoint, and our strategy has been to arm the global cybersecurity industry with the skills, knowledge and competency to address what is truly an international threat.
We offer a full range of disciplines to the American market:
• Penetration Testing
• Incident Response
• Threat Intelligence
• Security Operations Centres
Members of the North America Council were elected in December 2021 and the Council having served three years, have recently undergone elections. The full list of Council Members will be updated shortly along with confirmation of the new chair once elected.
The serving Americas Council Members are listed below in alphabetical order. Hold your cursor over each for more information.
Please note: we are currently going through a re-election, this page is subject to change and will be updated once the new council members are confirmed.
Rocco is a Managing Director with Alvarez Marsal and leads the firm’s Global Cyber Risk and Incident Response Services practice. He has been a trusted partner of multiple government agencies, including the FBI and the US Secret Service, where his cyber expertise was instrumental in investigating and resolving a variety of cyber-based crimes. He has advised clients on some of the most complex cybersecurity initiatives and coordinated incident response efforts for some of the largest security breaches over the last 14 years. Prior to joining AM, Rocco held leadership positions at professional services organizations including Stroz Friedberg/Aon Cyber Solutions, where he served as the Global Leader of the firm’s cybersecurity services. Prior to Aon Cyber Solutions, Rocco was a founding member of Protiviti’s Cybersecurity Practice and led the development of the firm’s Global Incident Response and Forensics Investigations Practice. Rocco is an affiliate board advisor for the Retail Hospitality ISAC and has assisted with other thought leadership initiatives for the FS-ISAC; and assists in creating its annual Compromise Against Payments Systems (CAPS), the simulated industry cyberattack exercise.
Grayson is the Director of Consulting and Professional Services for Trustwave Government Solutions. He has more than 20 years of experience in information security and digital technology, working as an Avionics Technician, Systems Administrator, Network Administrator, Security Systems Architect, Private Consultant, Incident Responder and Team Leader. Grayson works regularly with state, local and federal law enforcement teaching cyber security and digital forensics topics. Grayson is a former member of the International Association of Financial Crimes Investigators (IAFCI), the SANS Advisory Board and was previously a member of the Seattle and Los Angeles Electronic Crimes Task Force (ECTF). Grayson is a GCFA, CISSP and carries the CMMC-RP certification.
[Portfolio: Academia]
Chris is the VP of Technical Services at LRQA. He has also served as a CREST assessor since 2016 and has been a member of our Americas Council since 2021. Originally from a software development background, Chris moved to full-time cybersecurity in 2010. He specializes in an array of offensive security disciplines, such as penetration testing, and is experienced in building high performing security teams internationally. Today, Chris directs the Americas operation at LRQA, with particular focus on ensuring technical excellence across all areas of service.
Premal Parikh is the Founder and Chief Executive Officer of Accorian, a cybersecurity and compliance services firm based in New Jersey, USA. Under his leadership, Accorian has rapidly grown, to 150 people in just over 6 years. As leaders in cybersecurity Accorian performs over 400 compliance assessments a year across multiple frameworks including PCI, HITRUST, SOC-2, and NIST.
Before establishing Accorian, Premal held several key positions in the technology sector. He served as Chief Technology Officer at Everyday Health, Vice President at Dow Jones, and Director of Program Management at Sapient.
Premal holds a Master of Science in Computer Science from Stevens Institute of Technology and a Bachelor of Science in Computer Science from Tufts University. A proud father, in his spare time he loves to travel and explore new countries.
Richard Rogerson is the CEO, Founder at Packetlabs, a cybersecurity firm specializing in offensive security services. He has nearly 20 years of cybersecurity experience specializing in offensive security and is a member of the SANS Advisory Board. Established in 2011, Packetlabs’ ultimate purpose was to help organizations ‘Identify risks before they become headlines.’ Under his leadership, Packetlabs has established itself as a trusted provider of advanced penetration testing, application security, and red team engagements, serving clients across various industries.
In addition to his role at Packetlabs, Richard actively contributes to the cybersecurity community. He serves on the Cyber.Right.Now. Council, an initiative by the Canadian Chamber of Commerce focused on enhancing Canada’s cybersecurity posture. Through this council, Richard collaborates with industry leaders and government officials to address emerging cyber threats and promote best practices in cybersecurity.
[Portfolio: Penetration Testing]
Tony is CEO and founder of VerSprite.
Tony’s 25-year career in IT/InfoSec has led him to champion ‘true spirited’ security consulting. This is based on the observation that true security, although relative to each organization, is best managed via a risk-based approach where both an understanding of data usage and functional use cases are known in the context of viable threats scenarios and supportive attack vectors.
Tony is a co-author of Risk Centric Threat Modeling (Wiley 2015). Beyond VerSprite, Tony runs the OWASP Atlanta, GA Chapter and has been heavily involved in the OWASP global initiatives since 2008.
Paul is currently the Chief Operations Officer at Emagined Security and has more than 30 years’ experience in the field of network and information security management. Paul is experienced in both executive and technical management and an accomplished technically skilled consultant. Many technical services offered by the Emagined Security Consulting Services Division were created or adapted by Paul to ensure they meet and exceed client expectations. He is experienced with incident response, penetration testing services, security architecture and design, identification and authorization systems, security policies and procedures, security assessment services, certificate authorities, encryption, and Security Operations Centers. Paul has also served on several boards previously including the Colorado State OIT board and Emagined Security.
CREST Focus Groups help us to continually monitor best practice in Penetration Testing, Threat Intelligence, Incident Response, Intelligence-Led Testing and SOC. To see the relevant Focus Groups for Americas, please visit our Focus Groups page.
CREST North America is supported by Anne Purtell, Engagement Manager.
Contact: [email protected]