Projects / Audit & risk

Critical infrastructure & Tier-IV data centre audit

Led audit and risk assessment of 23 critical information infrastructures, including the national Tier-IV data centre.

The challenge

National systems needed independent assurance and a remediation path, without disrupting live services.

What I did

  • Applied ISO/IEC 27001 and national frameworks to evaluate controls and find gaps.
  • Delivered remediation roadmaps to government stakeholders.
  • Led the security and compliance workstream of the Tier-IV data centre's cloud migration.

Outcomes

  • 23 critical infrastructures hardened
  • ~65% better compliance posture
  • Zero downtime during audits

Next project

Early-warning cyber sensors in critical infrastructure

Read it