Andrew Mountstephens

Background

About Andrew Mountstephens

I have worked for over 30 years in Electronic Document Management and IT Service Management providing IT consultancy and running IT departments at various levels (Infrastructure, Development, Support). For the last 15 years I have specialised in information security working to standards including GDPR (data protection) (legal admissibility), BS27001:2013, ISO27002- 2022 (information security), BS22301 (business continuity) ISO 9001-2015 (Quality) and PCIDSS compliance (prevention of credit card fraud). I also have a good understanding of ISO14001 (environmental) I am fully experienced in building information security management systems from scratch and have led my organisation through multiple external certifications. I am a fully qualified auditor holding CISSP, CISA, Gold status in good standing for over 10 years. I have also been certified to Prince 2 project management PCI-ISA and am also a qualified GDPR Practitioner. I currently work at Quiss Technology, an IT Service Provider and manage their standards and information security posture. It’s a challenge with much variation which so far has seen us through multiple external audits with zero non-conformance’s. Despite our exceptional ratings in external audits we continue to strive for technical and working practice improvements to make the business more secure and efficient, with ISO27001 about to face a significant upgrade we are already mapping the new standard to the existing and setting about aligning our business so we can move across as soon as possible.