Carol has worked in the field of IT and Information Security for over 20 years and can remember when the now ISO27001 was just an emerging code of practice.
Carol learned the trade at Scottish Power before moving into the Local Authority sector, working for North Ayrshire and East Renfrewshire Council’s before moving to her current post at Renfrewshire Council 5 years ago where she was tasked with modernising the traditional IT security architecture fit for a secure digital enabled future.
Her approach to cyber security is to use technology to quietly protect assets and focus on risk management, being realistic and pragmatic about the threat, risk and opportunities, encouraging management and staff to do the same and for them to take ownership of their decisions and risk.
She also champions safe online skills within the community by regularly holding information and training sessions for the public, helping victims of cyber crime and training customer facing staff to recognise when a client may be at risk of cyber crime.
Carol is the Chairperson of the Scottish Local Authority Information Security Group.
In her private life, Carol enjoys cooking and in particular, making dog biscuits.