Faten AlAbdulwahhab

The head of the Information Protection section leading and managing three groups for IT/OT networks covering: Security Operations, Security Operations Center (SOC), and Identity and Access Management Groups.

One of the first employees in the newly CISO department which lead to many contributions in establishing the department processes and procedures. - Part of the ISO27001 implementation group in 2018. and was assigned as the ISMS DMR. - Lead the ISO27001 internal audit and external surveillance audit - Experienced in the GRC management for both IT and OT environments - Implemented the OT Vulnerability, Compliance, and FIM technologies for the OT network as the Tripwire project lead. - The project lead for Fortify project, which led to establishing the Source Code review process. - Established the SASREF cybersecurity consequence management program - Established and managed the Cybersecurity Committee - Responsible for SASREF Cybersecurity awareness program for 2018 and 2021 - Experienced in the Governance, Risk, and Compliance Areas (yearly rotation) - Created SASREF Cybersecurity Compliance Regulations Framework which covers all the Kingdom cybersecurity regulations. - Responsible for Governance function (2021) - Responsible for Compliance function (2019-2020) - The department focal point for the departmental KPIs, contracts, and finances

I Worked in the Information Security Department. I was responsible for the Awareness program, where I was handling the planning and execution of the monthly phishing and awareness campaigns and activities. I was responsible for the Active Directory auditing, where I have developed a tool that helped us in scanning the AD and get all account details and information that is audited against the policies.

Master of science degree in Computer Networks under the Computer Engineering department; my graduation thesis focused on Intrusion Detection System (IDS) for Realtime middleware (DDS) in the Industrial Control System (ICS) OT environment.