MBA, MSc (ACS), BSc (Hons), BSc (Inf Proc)

Carn has over 30 years’ experience in most aspects of the information technology domain, with expertise in the fields of IT governance & management, cyber security, and information management. He is accustomed to designing and implementing complex business solutions that are properly aligned to business and IT strategies for listed corporates, financial institutions, governments and state-owned entities.

Carn is the Director and Managing Consultant at CyberConnect Projects – a niche and expert provider of cyber security and project delivery consulting services. Carn’s practice is now dedicated to:

• Cybersecurity Strategy Design & Implementation,
  
• Cybersecurity Strategy & Business Strategy Alignment,
  
• Cybersecurity Risk Assessment, and
  
• Cybersecurity Risk Mitigation.
  

He continues to earn high praise and recognition from his blue-chip clients for his expertise. One of his recent projects included:

• Cybersecurity Programme Design & Execution –
• Assisted the Executive Management of Rand Merchant Bank (RMB) with articulation of their Information Security Strategy. Led the programme tasked with executing that Strategy, including ongoing review and assessment of the relevance and coverage of the key components of the Strategy.
• Managed all elements of the Cybersecurity Programme (comprising more than 40 projects) and successfully delivered solutions across all Information Security Domains:
•   ▪ Information Security Governance
•   ▪ Application Security
•   ▪ Data Protection
•   ▪ Identity & Access Management
•   ▪ Network Security
•   ▪ Monitoring & Resiliency
•   ▪ Service Continuity
•   ▪ Endpoint Protection
•   ▪ Physical Security Integration
• Developed and communicated the Information Security vision.
• Solutions implemented include: Application Security Framework encompassing Assessment, Threat Modelling, Application Security Architecture, Secure SDLC, and Security Maturity Modelling (based on Open SAMM); and Email Security based on behavioural analytics.