Welcome to CREST Asia

[Co-Optee]

Ryan is based in Singapore and is the Director for Centurion Information Security, a firm with a specialized focus on providing comprehensive cyber security assessment services. Ryan holds individual CREST certifications and since 2016 has consistently maintained the company’s CREST Membership and previously worked with CREST as an Assessor to deliver exams.

[Portfolio: Threat Intelligence]

Paul is the Chief Hacking Officer and co-founder at Vantage Point Security group, where he oversees the penetration testing services delivered by the group across Southeast Asia. Paul has more than two decades of penetration testing experience working in the banking and finance sectors and has been leading cyber security teams for most of his career.

Paul has published books on cyber security, spoken at international security conferences and has appeared on a range of news and current affairs programs regarding cyber security risks including TV and print media.

[Portfolio: Penetration Testing]

Based in Singapore, Ben is the founder of WatchTowr. He has over a decade of experience building and leading high-performing offensive cybersecurity teams across the globe.

Ben has a strong background in consulting, helping some of the world’s most targeted organisations and industries prepare for, and defend themselves from, sophisticated cyber attacks. In addition, he has been a member of the CREST Assessor team since 2016.

[Portfolio: Incident Response]

Jason has more than eight years’ experience in delivering high-priority global projects (independently and leading teams) across various industries. He enables clients to manoeuvre through complex landscapes smoothly and gain strategic “first-mover” advantages, and has worked with senior executives and stakeholders across all levels and departments to adopt new technologies securely while meeting business needs.

Some of Jason’s projects include leading the uplift of a cybersecurity regulatory framework for the banking sector; planning and leading threat assessments for global companies and large organizations across multiple sectors, including government and financial services; and supporting multiple incident response engagements by providing bespoke cyber threat intelligence to the incident responders.

Vikneswaran is a GIAC certified Penetration Tester who obtained his Bachelor’s Degree in Computing specializing in Computer Security from APIIT (now known as APU). He has been in the industry for nearly a decade, possessing expertise in vulnerability assessment, penetration testing, compromise assessment, red teaming, and more. On top of that, he is a cyber security awareness speaker with over a dozen talks held with various groups, including Board Members of certain organizations. He is currently managing a team of 20 security consultants and ethical hackers who provide security testing services for various clients across Malaysia and its neighbouring countries. He is also building a team for Incident Response and Endpoint Recovery Services at FIRMUS by becoming familiar with various EDR technologies and getting certified in them. His main objective from the start has been to provide quality cyber security services to clients without compromising on quality or the client’s experience.

[Portfolio: Threat Intelligence and Intelligence-Led Testing]

Gregory is currently the Executive Vice President and Head of Asia for Nettitude based in Singapore. He typically works with highly targeted organisations requiring nascent services and advanced capabilities, to further develop their resilience to sophisticated cyber-attacks.

Gregory possesses over a decade of cyber security consulting and technology experience combined with executive leadership roles and he has built, managed, and led cyber security businesses which have delivered projects across the APAC region since 2016.

[Portfolio: Academia]

John worked for over a decade in roles centred around securing business and business systems. He has years of experience building and managing large scale Security Operations Centres (SOC) in the APAC region. His primary interest is in managing the human aspects of information security; holistically blending technology and best practices to develop systems which are secure yet provide an effortless user experience.

John spends his free time working on security projects in the blockchain domain where he focuses on distributed trust and projects related to risk management.

[Co-Optee. Portfolio: Vietnam]

Louis has nearly 20 years of experience working in the IT and cybersecurity industry in leading Vietnamese organizations such as FPT Software, CMC Telecom (Service provider), SV Technologies (System Integration) before taking on his current role as a leader at VSEC. He was one of the founding members of VSEC back in 2009 when cybersecurity was not a major concern for digital systems in Vietnam. Over time, VSEC has become the first MSSP to monitor information security in Vietnam and provides services to over 60% of banks in the country. They play a crucial role in delivery information security service for various government departments and have strategic partnerships with international security companies such as Black Panda, Rapid7, Core Security, Record Future, and more. Additionally, VSEC was the first organization in Vietnam to receive CREST certification for Pentest and SOC service. He also serves the community as the Chief of the Cyber Security Technology Village in the Techfest program, a largest annual national innovation and creativity event led by the Ministry of Science and Technology. In his role and other co-chief, he successfully built an ecosystem for cybersecurity, connecting more than 40 experts in information security from Vietnam and abroad to support not only startups but also businesses in establishing a secure online environment.

[Portfolio: SOC]

Ramesh has more than 20 years’ experience in IT, managing large technology operations from endpoint management to distributed network. He has designed and built data centres and complex technology environments which include the management of Information Security and Cyber Security. Ramesh played a pivotal role in the setup of Vigilant Asia as an MDR player in Malaysia and was responsible for the end-to-end business and technical setup of the SOC operations.

[Portfolio: Research]

Britto leads the Global Security Lab at Schneider Electric. He is responsible for Penetration Testing, ICS Security, and red teaming for product and systems offers. For more than a decade, he has worked extensively with telecommunications security, cloud and virtualization security, and vulnerability researcher.

An expert in offensive security techniques, Britto has been involved in developing research skills for professional security teams. He has a team of highly skilled security professionals that focuses on critical infrastructure domain.

[Co-Optee. Portfolio: Malaysia]

bk’s ambition has driven his work to help others. He has been a computer teacher, course counselor, businessman, and activist promoting technology to combat modern slavery and organized crimes.

bk has over 20 years of experience managing regional information technology and cyber security projects with regulators, defense, government agencies, and private corporations. His understanding of the industry and people-person characteristics, with his solid experience on the ground, have built a trusted network in various private corporations, not-for-profit organizations, government agencies, and people from all walks of life.

His expertise includes project management, building and conducting solutions workshops, reviewing and responding to RFP/RFI, business development, relationship management, and legal and regulatory framework. He is currently working on a research paper on Maritime Cybersecurity: Formulating a Legal and Risk Management Framework in Malaysia with the University of Malaya.

[Portfolio: Academia and Research]

As a trusted advisor, Cecil leads and manages wide-ranging initiatives in both the government and commercial sectors in the areas of cybersecurity assessments, secure development lifecycle, technical countermeasures, threat analysis, cyber investigations/forensics, and IoT/OT technology.

He has spent many years performing and overseeing cybersecurity assessments, technology audits, digital forensics including complex enterprise platforms on networks and applications. Aside from that, Cecil has been involved in developing and deploying risk-based management and data governance frameworks, helping clients to manage data protection, risk and meet associated regulatory requirements. He currently volunteers in the Association of Information Security Professionals (AiSP), OWASP SG Chapter and WorldSkills Singapore.

Emil is Chief Operating Officer of cybersecurity talent development company Red Alpha. He took up the role of Chair of the Asia Council in December 2021, working with the council to support members and helping to shape our strategy in the region.

Emil founded and runs Singapore’s largest cybersecurity community group, Division Zero (Div0), worked for the Infocomm Media Development Authority (IMDA) and was recently seconded to the Cyber Security Agency of Singapore (CSA). He is also Chair of Singapore’s Cyber Youth Singapore (CYS) and is a co-Founder and permanent member of the Global Cybersecurity Camp (GCC) which is an Asia-Pacific talent development programme.

[Portfolio: Marketing & Training]

Henry is an effective leader with a track record of developing, presenting and managing implementation of innovative business solutions.

He accumulated technical background in software development, network design and cyber security with a strong understanding of software architecture which helps him to grasp technical requirements to implement business solution. As a CEO he has established softScheck in the region and driven the company’s fast growth trajectory.

[Co-Optee. Portfolio: Indonesia]

Faisal is a Cyber Security Strategist with over 20 years of experience combined as a Country Manager, Chief Information Officer (CIO) executive, and Chief Information Security Officer. He plays an integral role in spearheading the Information Security strategy roadmap, interfacing core business functions and technology teams — establishing and presenting a cybersecurity strategic vision using technical skills to generate confidence with business stakeholders and company leadership.

Faisal has given many public speaking at industry conferences and academic events about various cybersecurity topics. Faisal also serves as an Official Instructor for EC-Council and Cloud Security Alliance. Faisal advocates for better cyber safety practices and defining improved Cybersecurity space in the South East Asian IT communities, actively researching and speaking. Faisal is passionate about upskilling people and organizations about cybersecurity.

Contact: [email protected]