An acknowledged thought leader in security, Paul has over 30 years of experience as a security and risk executive at Morgan Grenfell/Deutsche Bank, Barclays Bank, and BP. He has received several awards including Chief Security Officer of the Year, IT Security Executive of the Year, and IT Security Hall of Fame. He is a Visiting Professor in Information Security at Royal Holloway, University of London. In addition to his speaking and lecturing activities he helps companies and government departments in building their information security strategies, risk governance and metrics including acting in interim CISO roles and supporting CISOs in developing their functions. He is an expert witness in information/cyber security for regulatory cases and contractual disputes. His publications include work on cyber security behaviour and culture change – ‘The Weakest Link’, Bloomsbury and also publications on IoT and cloud security. He is a Director of the IoT Security Foundation.