Shawn R. Chaput is an Executive Security Consultant and Chief Architect for Privity Systems Inc. in Vancouver, Canada. 

With a past of working for large consulting firms like IBM and EDS, he has over 14 years tenure in IT and more specifically within the Security, Privacy, Audit and Compliance professions.   As a trusted business advisor to many large and well known organizations, Mr. Chaput tends to fill the role of Chief Information Security Officer, either in an interim facility or more “on demand” as the skills are required. His role has lead him to advise executive management how to effectively govern and manage IT risk; design enterprise security architectures, strategies & plans; develop cost-effective and sustainable security management policies and practices for governance frameworks. Shawn has also led a number of significant cost projects to implement and deploy a variety of security solutions or security aspects of engineering projects.

His experiences in the Information Security arena have extended from the transportation industry, telecommunications, oil and gas, natural resources, higher education, retail, financial, health care and public sector. He actively participates in the Canadian Advisory Committee for the ISO SC27, which develops the ISO/IEC 27000 series Security Standards and is also a contributing member of the ISACA Standards Board. 

He has contributed to several articles and books for ISACA, ITGI and ISC2 and was the principle author of the “Audit & Compliance” section of the widely circulated “CSA Guidance for Critical Areas of Focus in Cloud Computing” white paper published by the Cloud Security Alliance in 2009. 

Moderator / Facilitator for:-

Overview of Cloud Security Alliance: Goverance, Risk Management, Compliance and Audit (GRCA) Domains

In this presentation, we will introduce at the Governance, Risk Management, Compliance and Audit domains of version one of the Cloud Security Alliance's Security Guidance for Areas of Critical Focus in Cloud Computing.  At a high level, we'll investigate each area and focus on the importance of each in Cloud Computing agreements and management.

This session will act as a precursor to the Panel and Workshop developing requirements for version 2 of the guidance scheduled for release this fall.

return to program