| Scott's most recent position was the Lead Security Analyst at one of the largest independent energy producers from 2000 to 2009; an $8B electric utility company. Scott developed first official security organization within the information services group. He implemented a compliance program that led to development of seven Sarbanes-Oxley compliant processes, and set the stage for the company’s NERC CIP compliance program. He also created the first centralized access management team, supporting 24 different applications from ERP to single department, 50-user applications.
Scott’s accomplishments include training leaders for two new IT groups that led to the energy company passing its IT SOX audit with zero deficiencies. Due to growth of IT group and demands of Sarbanes-Oxley, three disparate groups were created: Security, Change Management and Compliance. Scott trained and transferred knowledge to new leaders, ensuring the electrical utility would pass SOX audit with zero deficiencies for first time in these areas.
Another of Scott’s accomplishments included saving $1M at the energy company by avoiding licensing costs for new tool purchases and finding alternative solutions. Scott reviewed all licensed products the energy company had purchased for monitoring. Scott managed the re-deployment of HP Openview with monitoring components along with CiscoWorks for firewall and several other tools for security monitoring. Scott’s efforts resulted in significant cost savings and while achieving the objective of ensuring viruses and abnormal activities were detected and shutdown before infection of other systems.
Also at the same company, Scott documented, obtained approval and won acceptance for standards in operating system and server hardware. No standards existed for server hardware and OS builds at the energy company. Each server was named differently and security settings lacked consistency, causing confusion and delays. Scott created and implemented highly effective standards, which remain in effect with the same general configurations eight years later.
Lastly, Scott led the final deployment of 800 servers in less than six months, which otherwise would have taken up to two years. He ensured proper dissemination and sharing of data / information among worldwide locations of two different high tech companies. Sharing of data and e-mails was not working at all sites, impacting in various ways 30,000 worldwide staff. Scott visited sites in Thailand, Malaysia, Australia, New Zealand, Hong Kong and The Philippines, articulating the value of the standards and guidelines to ensure adherence.
Scott graduated from the University of Southern Colorado with a major in Business Administration with a minor in Computer Information Systems.
He is a current member of IEEE, ISSA, InfraGard and NSIAG |