About Me

I'm Muhammad Imtiaz, an information security professional with about ten years of experience across ICT, information security and cybersecurity. My focus is OT/ICS cybersecurity in oil and gas, alongside fintech security and governance, risk and compliance (GRC).

I hold a Master of Engineering in Computer Systems (Computer Networks and Systems Security) and a Bachelor of Engineering in Telecommunication Engineering.

Certifications

• ISO/IEC 27001:2022 Lead Auditor
• CISM (Certified Information Security Manager)
• GICSP (Global Industrial Cyber Security Professional)
• SANS ICS / ISA/IEC 62443

What I write about

Practical notes on industrial control system security, standards such as ISO 27001 and IEC 62443, and building security programs that work in the field. You can find my work under Blog, with talks, slides and videos to follow.