| Our People

Senior-led: the person you meet does the work.

| The Wider Team

Matthew leads every engagement and draws on a trusted bench of specialist practitioners as programs require. In our line of work we keep our people off the public internet — team profiles are shared on engagement.

| Founder Experience

Federal Government

• Operated as a de facto enterprise security architect for one of the largest agencies across three programs of work — A full service transition to a new set of material service providers, a technology resilience program and the multi-million dollar per year cyber security program — with a focus on workforce identity & access management, endpoint protection, network and API security for population-scale services.
• Shaped the standards for the Trusted Digital Identity Framework for Australian government identity management with substantial contributions.
• Contribued to the standards for the digital health record security standards.
• Developed the security requirements, proposed security architecture and tender documents for the replacement of the Federal Budget System.
• Performed security advisory research and commentary for a public facing security alert service.

State Government

• Sole security architect for Service Victoria, responsible for the security strategy of the Victorian State Government's digital program — a fully CI/CD-orchestrated AWS platform with DevSecOps delivery, a bespoke customer security stack for millions of Victorians and a SaaS workforce identity stacks.
• Spent 12 months at CenITex uplifting the coverage, maturity and documentation of security operations processes for this whole-of-Victorian-Government service provider to eight departments and agencies.
• Further developed the SABSA-aligned enterprise security architecture and security standards for VicRoads.
• Managed a state government's internet service provider, web hosting environment, tendering system, ecommerce system and credit card payment gateway, including firewall, router, server and intrusion prevention system administration.
• Developed technical security standards for a Victorian government health shared service centre.

Critical National Infrastructure

• Testing, tendering and commissioning the upgrade of security systems of maximum security prisons for year 2000 compliance.
• Designing, tendering and commissioning physical and electronic security upgrades for maximum security prisons, a juvenile detention centre and a maximum security remand centre.
• Conducting configuration examination based security assessments of SCADA systems for water and electricity utility audit departments.
• Testing a dispatch system for an emergency services organisation.
• Assisting on the design of the security for a maximum security reserve bank in an Asian country, including protection against Nuclear, Biological and Chemical (NBC) attack.

Qualifications

• Certified Information Systems Security Professional (CISSP)
• One of a handful of Forrester Certified Zero Trust Strategists in the world
• Bachelor of Science (Security), Edith Cowan University — at issue in 1997, one of five people in the world with a bachelors in security management

Professional Associations

• Former Branch Executive of the Melbourne Branch of the Australian Information Security Association
• AISA Professional member
• Information Security Forum participant
• Open Web Application Security Project participant

Other Honours

• Author of the Amazon Kindle ebook Information Security Operations, one of only two written works worldwide on security operations structure and operations.
• Prominently featured in a half page article in the Age newspaper.
• Published in Australian Security Magazine.