Welcome to CREST UK

[Portfolio: Cyber Leaders’ Forum]

Dave joined the British Army as a Royal Signals Operator and served for 10 years, with the latter half of his career focussed on counter terrorism support to HMG overseas. He then joined the Foreign and Commonwealth office in a variety of IT/Security related roles and finished his civil service career as Head of International Cyber Capacity Building. In 2019, Dave co-founded CYSIAM as the CTO and in 2021, moved into the Managing Director role.

CYSIAM works in strategic partnership with public and private sector clients who understand, and are serious about mitigating, the risks that cyber incidents pose to their critical systems and data.

[Portfolio: Threat Intelligence]

Oliver is CEO of Orpheus, a specialist Cyber Threat Intelligence company. He is responsible for Cyber Threat Intelligence on the UK Council and is a passionate believer in the importance of intelligence-led security. Oliver has previously established successful cyber security teams and capabilities at major global organisations and has a wide range of risk management and security experience, developed working for a diverse range of large and small organisations over the last 17 years.

An expert in cyber risk management and cyber resilience testing, Oliver has been involved in developing intelligence-led cyber resilience frameworks, working with regulators to do so, and has extensive experience leading cyber threat intelligence teams to conduct the testing itself. Oliver’s cyber security expertise is built on a foundation as a qualified lawyer, which enables him to add the legal perspective to the management of cyber risks. Oliver is a CREST Certified Cyber Threat Intelligence Manager (CCTIM), an Assessor of the TI examinations and a Solicitor of the Supreme Court of England and Wales.

Simon is responsible for the technical delivery of complex assurance engagements to regulators and a variety of public and private sector clients. He has designed various testing methodologies used by the company and was involved in the development of the CBEST framework. He is a Fellow of CREST and was an Assessor.  He remains keen to ensure CREST delivers ‘best of breed’ examinations and that our industry-wide reputation is maintained and enhanced globally.

Rob is the CEO and Director of Intelligence for Security Alliance Ltd, a Cyber Threat Intelligence company. From a military intelligence background, Rob transitioned his intelligence tradecraft into the cyber domain where he is an advocate of ‘Intelligence Preparation of the Cyber Environment’.

Rob’s primary work has been designing intelligence-led resiliency programs, developing intelligence capability, creating intelligence sharing frameworks and initiatives and providing intelligence led consulting engagements. Rob holds the CREST Certified Threat Intelligence Manager qualification, is a CREST TI Assessor and sits of the CTIPs Sub- Committee.

Rob was formally elected as Chair of what was then the GB Executive on 3 March 2021.

Contact: [email protected]

[Portfolio: SOC]

Jed spearheads the cyber practice at Claranet, with roots in penetration testing, red teaming, and offensive security management. Having worked at several CREST member companies, he has developed and implemented pentesting and red teaming programs for numerous global organisations. Jed is dedicated to enhancing cybersecurity strategies in collaboration with CREST and its members. He is deeply interested in the integration of generative AI and machine learning into existing processes, aiming to provide customers with a more enriched and insightful service. He is currently leading in-house projects that incorporate generative AI into the scoping process.

Ian has 20 years’ experience in the IT industry latterly as technical lead for DXC managing CHECK, STAR and GBEST penetration testing and long-term vulnerability scanning implementations. He has also been responsible for secure architecture reviews and secure code reviews covering multiple industries including finance, public sector, telecoms, and oil and gas. Ian has been a CREST Assessor since 2015 and is currently running the our exam development group creating our next generation exams.

Brian has a wealth of experience in the Security Assessment and Audit fields. He has worked in America, Africa, and a variety of countries across Europe. His work includes security assessments for all sectors. His current role covers business development of all forms of security testing, managing security testing programs, delivery of security testing, coaching/management, mentoring, and being a thought leader as part of the X-Force Red global team management team.

Brian is keen to help CREST and the industry move further forward in its objectives to make it successful for all. Whether this is people starting security careers or companies looking to ensure they are aware of their security and vulnerability profiles, through using the services provided by our member companies.

[Portfolio: Penetration Testing]

Boglarka is Director of Operations at Commissum (Eurofins Cyber Security UK), with a background in penetration testing and UNIX systems administration. In her role she relays a lifelong passion for the security industry, supporting a variety of businesses, both large and small on their journey to a more mature security posture. Boglarka works with young people to help them find a fulfilling career in one of the many areas of cyber security, focusing on challenges associated with niche requirements such as testing mainframes.

[Portfolio: Intelligence-Led Testing]

Ben is the Global Head of LRQA’s Advisory Services’ and has over a decade’s experience in the cyber security sector. During this time he has worked with a huge client base ranging from UK Government, Banking Sector (Including Central Banks) and many well-known private sector organisations worldwide. Ben specialises in intelligence-led simulations (STAR) and infrastructure testing but has a wide variety of knowledge in many areas, including training, tool development and incident response. Not only has he delivered in-depth technical assurance services, but has excellent communications skills that span a wide range of audiences including technical, business management and senior leadership.

Ben was formally elected to the UK Council at the Annual AGM 14 June 2022.

Martin is an industry recognised cyber security expert with the business gravitas and presence to lead and deliver at large programme level.

Martin has excellent stakeholder relationships with industry and regulators and has been directly involved in shaping the maturity of the cyber security eco system both on a National and International basis through memberships of working groups, research, the development of new schemes and standards, and through his previous work on the former Executive Board for CREST.

Martin has excellent skills in risk management, security architecture, policy development and security leadership. He is highly proficient in accreditation and in developing information security management systems.

Martin has extensive experience of developing trusted assurance models for hardware and software systems and leading the evaluation of hardware and software systems under trusted assurance scheme models.

Martin has a pragmatic, mature consultative engagement approach. He is committed to providing quality business focused service. His levels of focus and commitment are evident in his unblemished track record for delivery