Justin L

• Oversee all IT infrastructure; including MS Windows and Linux servers, Azure, VMware, wired and WIFI networks, helpdesk, backup and monitoring. • Provides IT services for over 300 affiliated kindergartens, primary schools, secondary schools, elderly centers, youth centers, rehabilitation centers and holiday camp sites. • Develop IT security policies based on ISO and NIST framework • Conduct risk assessments and vulnerability testing to the application systems; review security for affiliated schools • Elected as a steer committee member in IT risk assessment project lead by HKCSS for over 80 NGOs in HK. • Adopted Cloudflare to protect against DDos attacks and improve web performance empowered by CDN • Lead the IT projects initiated by Social Service Department, e.g. Pilot WIFI.HK for 80 service centers • Design network and adopt IoT for the new Yuen Long Youth Hostel which is about 4100 square meters and 25 floors

- Develop information security policies, establish security standards and provide security training to end users - Lead the network team to provide direction and recommendations regarding network configurations and installations, configure or upgrade network components, and coordinate network changes and communicate with impacted stakeholders. - Conduct risk assessment and provide recommendation on systems and networks security.

• In charge of the IT security, one-man band • Develop security policies, procedures and guidelines, • Establish security incidents handling guide and enforce the procedures with IT teams • Tackled the students accounts hacking problems which have been reported to polices several times in previous year • Improve the authentication security by deploying DUO 2FA to over 3000 staff and students • Follow up the findings in risk assessment reports • Implement SIEM – Splunk to enable the visualization of network and systems security • Organized Lingnan University Information Security Conference (2018), invited HK Police, The Office of the Privacy Commissioner for Personal Data, and IT vendors as the guest speakers • Members of Join University Computer Center (JUCC) on behlaf of the University and provides advice to other 10 universities and higher education instituations in HK

• Ensures the operations adhere to the regulatory standards, e.g. SOX, PCI DSS • Conduct third party risk assessments with the partner companies, e.g. Bank of China, TVB and Alipay • Carry out vulnerability testing to the ride systems in park and POS system in hotel and retails • Managing credentials with CyberArk Privileged Account Management • Conduct cyber security trainings

• Develop and maintain IT Security Policies based on ISO27001/2 • Carry out risk assessments for around 50 departments and faculties in these 5 years • Organize security exhibitions and awareness trainings for over 20,000 staff and students in 5 years • In charge of IT security for the University’s systems, e.g. Student Information Systems, eLearning systems, mobile apps, etc • Responsbile for network security, handled the DDOS attacks in 2014 which was second largest DDOS attacks in internet history • Deployed Nessussguard to proect DDOS • Manage WAF, IPS, NG Firewall, DB Firewalls to defend the network primeters from cyber attacks • Work closely with PDPO and HKU’s legal consulant for enhancing personal data protection

• Responsible for IT security in HK branch, One-man band team; Member of virtual security team of Japan and Asia Pacific branches • Conduct compliance check with internal audit department and third parties assessment from auditors and HKMA • Enforce IT Security standard and corporate security policies • Provide first line support to VPN and data centre security

• Administrate over 100 firewalls (Netscreen, CheckPoint and Cisco ASA), IPS (Juniper IDP and Radware, TippingPoint), IPSec VPN, SSLVPN, Web content filtering system (Bluecoat) and other kind network security devices to protect the Club’s data • Design and review systems and networks design to algin the security standard with Club’s policies • Took part in the external projects China sports lottery (中国体彩) and Taiwan sports lottery (台灣運彩), responsible for information systems and network security

• Responsible for managing IT security device for PCCW group • Manage firewalls - Cisco Pix firewall, ASA 5500, CheckPoint 4.1, R55, R61, Juniper Netscreen SSG, SSL VPN, Sonicwall and Nortel VPN • Perform OS hardening review - MS Windows, Linux, UNIX, SUN Solaris & AIX • Conduct Database security analyze - Oracle and MS SQL security and audit logs tracing • Take part in security projects, e.g. 3G mobile Data centre relocation from Kowloon Bay to Yau Tong, Setup IPSec VPN for HK government departments, Implement Juniper SA4000 SSL-VPN for 2000 PCCW staff members • Provide trainings for Helpdesk and operation staff members • Deploy anti-virus solutions for the group over 20,000 PCs