Ernst J. Oud's curriculum vitae

Name			: Ernst Jan Oud BScE CISA CISSP
Address			: Nijenbeekseweg 16
City			: 7383 BD  Voorst
Telephone number	: (+31) (0)575 - 501528
GSM			: (+31) (0)6 - 23969309

Date of birth		: September 21st, 1959
Place of birth		: Amsterdam
Marital status		: Married
Nationality		: Dutch

			  Click here for information about my CISA and CISSP titles.

Current job title	: Director, kineta ICT advies

Work Experience (in reverse chronological order).
1/9/09 -	kineta ICT advies
		Nijenbeekseweg 16
		7383 BD  Voorst

		Function : Director 

		On September 1st, 2009 I founded my own company.
		See the link above for more information on our services.

		ISO 27001 Lead Auditor and (soon) ISO 9001 Auditor for BSI.

		Quality & Compliance Manager for Silent Motor Company.

1/3/08 		Microsoft
- 30/11/09	Evert van de Beekstraat 354
		1118 CZ Schiphol

		Function : Enterprise Strategy Consultant (ESC) 

		ESCs are senior-level consultants from Microsoft Consulting Services (MCS) 
		who support enterprise customers and Microsoft’s leading partners. 
		ESCs form part of the customer’s executive IT staff and are driven entirely 
		by their business needs.
		
		Projects: 

                Review of security baselines for two financial institutes.
		Quality review of a project.
		ISO27001 certification of one of the world's largest banks.

1/2/03		Deloitte Enterprise Risk Services 
- 1/3/08	Laan van Kronenburg 2
		1183 AS  Amstelveen
		
		Function : Senior Manager
		
		Deloitte has bundled its services in the areas of risk management and control
		in Enterprise Risk Services. ERS supports organizations in identifying 
		and controlling risks.

		Responsibilities are BS7799 project management, business continuity management 
		and IT-Audit as well as managing/coaching, acquisition, knowledge transfer and 
		product development.

		Projects in the period 2003 - 2006:

		Projectleader BS7799 certification project at the Deloitte CyberCentre.
		
		Assistant to the projectleader (QA) in BS7799 certification projects at the two
		largest ICT providers in The Netherlands.
		
		Projectleader business impact and risk analysis for continuity planning with a
		large service provider.

		Development of a pilot security dashboard for one of Europe's largest banks.

		Assisting BS7799 projects in Armenia and Portugal.

		Audit, quality assurance on a BS7799 project at a large telecoms provider.

		Developer and teacher of a series of courses re. NEN7510 for the healthcare sector.

1/10/01  	Urenco Nederland B.V.
- 1/2/03	Planthofsweg 77
		7601 PJ  Almelo
			
		Function : IT Security Officer
		
		Urenco Nederland B.V. is, together with Urenco Deutschland GmbH and 
		Urenco UK Ltd., part of the Urenco Group. Urenco produces ultracentrifuges for 
		uranium enrichment and separation of stable isotopes. Urenco also manufactures
		parts for the aviation industry.
		
		The tasks of the IT Security Officer are maintenance of the BS7799 ISMS 
		(Information Security Management System) by audits and awareness programs 
		as well as planning and implementation and auditing of improvement projects.
		
		Reporting to management via the Plant Security Manager.

1/1/98 		Getronics Business Continuity B.V.1
- 1/10/01	Botter 15-90
		8232 JR  Lelystad

		Function : Managing Consultant

		Getronics Business Continuity B.V. offers IT-dependent
		organisations services to secure the continuity of 
		critical IT-processes from consulting in making a 
		continuity plan to implementing information security.

		Advising customers on information security and the 
		continuity of information management and processes.
		Coordination and delivery of projects.
		Maintaining customer relationships.
		Making offers. Pursuing business opportunities.
		Visiting prospects. Product development.

		Coach for seven (senior-)consultants.
		
		Main current project (as of June 1999):
		
		Projectleader implementing BS7799 and certification
		within two organisations.

		Click here for more references.

		1 Formerly: Computer Uitwijk Centrum B.V.

1/4/94 - 1/1/98	CRYPSYS Data Security B.V.
		Edisonweg 4
		4207 HG  Gorinchem

		Function : Security Consultant / Sales Manager

		CRYPSYS supplies consultancy, education and products
		to implement a successful data security strategy within 
		companies. Most customers are large accounts within the 
		government, industry and banks.

		Responsibilities are direct and indirect sales controlled
		by a marketing and action plan, researched and written 
		by myself. Responsible for sales forecasting. Directly 
		responsible for the sales target. Managing the sales team
		consisting of 2 sales engineers and 2 account managers.

		Consultancy (risk analysis), organising seminars and 
		training sessions. Implementing and auditing security
		according the Code of Practice (Code voor Informatie
		beveiliging) within companies and local governments.
		
		Directly reporting to the general manager.

1/2/93 - 1/4/94	Toshiba Information Systems (Benelux) B.V.
     		Rivium Boulevard 41
              	2909 LK  Capelle a/d IJssel

                As of February 1st, 1993 the job-title changed to Large 
		Account Channel Marketing Manager. Key area: 
		transferring product knowledge on a strategic level to 
		Large Accounts (mostly EDP management). 
		Developing and executing communication plans towards
		that target group together with the marketing manager. 
		Organising seminars.

1/8/92 - 1/2/93	Toshiba Information Systems (Benelux) B.V.
     		Rivium Boulevard 41
              	2909 LK  Capelle a/d IJssel

              	As of August 1st, 1992 the Belgian part of Toshiba has been 
		integrated with the Dutch organisation. Since then the name 
		of the total organisation has been changed.

		The function is still Product Manager, but responsibility 
		has been partly extended to the whole of the Benelux.

1/7/91 - 1/8/92	Toshiba Information Systems (Netherlands) B.V.
		Doesburgweg 6
		2803 PL  Gouda

              	As of July 1st, 1991, Reprotechniek Systems B.V. was taken 
		over by Toshiba Corporation. Soon after this take-over the 
		function was changed.

              	Function : Product Manager Toshiba Computers & Printers

              	Characteristic activities :

              	Total technical product management. Preparing product
		releases, research into product/market combinations.
		Setting up of a product launch plan. Total product life
		cycle management. Competition research and evaluation. 
		Market analysis. Giving product presentations. 
		Contributing to dealer conventions.

1990 - 1/7/91	Reprotechniek Systems B.V.
              	Tielweg 5
              	2803 PK  Gouda
            
              	Function : Manager Training & Education

              	Characteristic activities :
		Design, production and presentation of commercial 
		training material for dealers.
              	Managing the sales assistant.
              	Research into vertical applications of portable computers 
		with the aim of organising seminars.
              	Dealer account management; supporting a number of dealers.

1989 - 1990	PHILIPS Telecommunications and Data Systems
		Business Centre Financial Industry
		Stockholm, Sweden
           
		Function : Product Manager Voice Response Systems
          
		Characteristic activities :

		Defining specifications.
		Commercial and technical project management.
		Contributing to the business plan.
		Giving commercial and technical training.
		Design and creation of commercial marketing material.
		Consultancy, and giving presentations.
		Technical support.
		These activities were targeted at the national sales 
		organisations in 63 countries.

1987 - 1989	Teacher data communication at an MTS evening-school 
		in Rotterdam.

1982 - 1988 	PHILIPS Telecommunicatie en Informatie Systemen B.V.
		Maanweg 156
		2516 AB  Den Haag
            
		1982 - 1984 :	Customer Support Engineer
				Second-line software support on micro- 
				and mini-computers

		1984 - 1986 :	Systems Consultant
				Voice Response Systems

		1986 - 1988 :	Team Manager 
				Special Project Support

				Some characteristic activities :

				CD-ROM	MegaDoc	Image processing
				LANs  	IDEAS	Edifact	Sponsoring

Education.
1971 - 1978	Voortgezet onderwijs; Atheneum-beta (eq. Secondary School)

		A-levels :	- Dutch / English
				- Geography / Biology
				- Mathematics / Physics / Chemistry

1978 - 1982	Hogere Technische School (equivalent to Polytechnic)
		Title  : Ing. (equivalent to BScE)

		Voluntary Assistant in Physical Lab.	- NIKHEF Amsterdam
		Technical Drawing Engineer		- CSM Halfweg
		Audio Technician			- Nederland Muziek 
							  Amsterdam

		Final project  : Design and construction of hardware and 
		software for a serial interface between a PR1ME 
		mini-computer and Tandy microcomputers.
                        
Post-graduate studies.
1984 - 1986	Delft University, Evening school 
		Numerical Methods, Advanced Informatics.

1985		Project Management

1986		Commercial skills

1987		PHILIPS Business Course I

		Subjects :	management
				presentation techniques
				personal assessment
				economy / marketing

1989		Open University, Marketing I  (equal to NIMA-A)

1989		Open University, Marketing II (equal to NIMA-B)

1990		Various sales trainings (at CATCH IJsselstein)

1999/2001	CISA training (title obtained)

2002		KPMG BS7799 ISMS Lead Auditor Course & Exam

2003		CISSP training (title obtained)

2009		Introduction to Social Psychology - Open University

Numerous courses and lectures; for an overview click here. 

Knowledge areas.
Electronics		Speech technology
Telephony		Audio / Video technology   
Micro / Mini computers	Operating Systems
Microprocessors		Database Systems
Assembly language	Data- and telecommunication
PC hard- and software	Apple Macintosh hard- and software
Voice Response Systems	Programming languages
Local Area Networks	High-frequency technology
Computer Security	CompuServe / Internet / HTML

English (fluently)
German (fluently)
French

Presentation skills
Sales skills
Project Management
Product Management / Marketing
Sales force automation
Code voor Informatiebeveiliging (BS7799 / ISO 17799)
Voorschrift Informatiebeveiliging Rijksoverheid
CRAMM (CTTA Risk Analysis and Management Methodology)
ITIL (IT Infrastructure Library); Contingency Planning, Security Management
IT-Audit
Quality Management

Network.

Member of the NGI ('Nederlands Genootschap voor Informatica' - 'Dutch Society for Informatics').
Member of the GvIB ('Genootschap voor Informatie Beveiligers' - 'Society for Information Security').
Boardmember of the section security of the NGI.
Teacher with the 'masters information security' study at Tias Business School.
Ex member of SC27 of the Joint Technical Comittee 1 of the International Standards Organization. 
Member of ISACA.
Ex correspondent for the monthly magazine 'IT Beheer'.
Ex teacher with the Nederlands Normalisatie-instituut (NEN).
Ex chairman of the Dutch CRAMM User's Group (CGG).
Associated member of the NOREA (Nederlandse Orde van Register EDP Auditors).
Ex member of the Centraal College van Deskundigen - Informatie Beveiliging (CCvD-IB).
Ex member of the Information Security Forum (ISF).
BS7799 Lead Auditor.

Specific PC :		MS-DOS		'C'
              		Windows		80x86 assembly language
              		WordPerfect	PlanPerfect
              		dBase III	Excel      
              		Powerpoint	Basic
			Lotus 1-2-3	Linux (embedded)

Specific Macintosh :	System 6.0.3 / 7.1 / 7.1.1 / 7.5 / 7.5.5 / MacOS X
			Think C++
			FutureBasic
			Prograph Classic
			Word
			680x0 assembler

Hobbies : 		Dachshunds / German Shepherds, Macintosh computing
			Art, Nature, Travelling

By following the developments within the PC industry from the beginning in 
1981, there is a deep understanding of this trade and its products. 
The number of jobs held within the last couple of years, have generated a 
large experience of project and product management. This experience is 
universal and is therefore not bound to the IT industry.

 Some recent work of me is found here.