I have 32 years of experience in the field of information technology (IT) risk management, with specific knowledge of information security, IT governance, and infrastructure design and management. I have published on such topics as information security.