Gary van Exan

Background

About Gary van Exan

My goal is to develop IT policies, directives, processes and procedures that lead to consistent and repeatable service delivery in my area of expertise which is IT Security. I have led the creation, socialization and adoption of supporting standards, processes and procedures to implement Government of Canada policy instruments, the goal always being to take high level Canadian Federal policy instruments (based on many other national and international standards such as NIST 800-53 and ISO 27001), Federal guidance publications (not necessarily mandatory, but making them mandatory from the departmental perspective) and translating them into consumable business language at the upper departmental management level, and then into actionable activities that can be executed by a technical team composed of analysts and operational implementers. The end goal of this holistic approach to IT (security) service delivery being to implement securely designed IT systems that are built with security in mind from the initial design and conception phases, and to re-iterate, doing this in a consistent and repeatable manner.