Nils PuhlmannFounder

United States - San Francisco Bay Area

• 20+ years technology management experience in diverse business environments.
• Expertise in developing, implementing and managing IT security strategy and policy, risk management, intrusion detection, vulnerability assessment, network security design, application security and incident response
• Strong project management and product strategy skills. Expertise in technology
research and effective application of emerging technologies. Strong communication skills – effective in presentations to both technical and non-technical audiences.
• Extensive experience in U.S., Asian and European Markets.

• CISM; CISSP with ISSMP concentration;
Checkpoint Certified System Engineer (exp.); Cisco Certified Network Associate (exp.); Microsoft Certified Trainer (exp.); Certified Novell Instructor (exp.); Thawte Digital Certificate Notary; CERT/Carnegie Mellon University Computer Security Incident Response Team training

• Regulatory/Audit: SOX; GLBA; HIPAA; COPPA; GAPP; SAS 70; FISMA; FFIEC; CISP; PCI; 21 CFR Part 11; California SB 1386; California SB 1841; Cobit; COSO; Webtrust
• Federal Standards: TCSEC; FIPS-140-2; FIPS-201;
• ISO: ISO 9001; ISO 17799; ISO 15489; ISO 15408; ISO 27000 Series; BS25999
• International: GASSP; ITIL; BS7799; FSMA; Safe Harbor Act; PIPEDA; BSI 100-1; DigSig
• EU Data Protection Directives: Directive 95/46/EC; Directive 2002/58/EC
• Concepts: Threat & Vulnerability Assessment & Management; Risk Assessment & Management;
Security Policies & Procedures; Risk Mitigation; Disaster Recovery Procedures; Business Continuity Management; ItSec Principles & Practices; Authentication & Authorization; Validation; Security Awareness; ID & Identity Management; Patch Management; Forensics; Pen-testing; Web Application Security; Secure Coding Principles
• Physical Security: Access Control; Perimeter Security; Biometrics; Facilities Design;
Security Compliance and Procedures; Surveillance Systems; CCTV

Specialties: IT Security, Governance and Audit, Product Security, Vulnerability Assessments, Risk Management