Mengchang Liu

• Guide and proficiently oversee a team of 6 experts, orchestrating harmonious collaboration and achieving optimal results through strategic leadership and meticulous coordination. • Conceptualize, develop, and tailor cyber security training programs for both government and industry clients. • Deliver comprehensive training modules encompassing cyber security, personal/data privacy, technology risk management, and business continuity management. These programs cater to audiences across the spectrum, from novice users to seasoned professionals. • Pioneered, designed, established, and currently lead a cyber security training and education subsidiary under ACSI – the ACSI Cyber Security Academy (ACAD; www.acsiacad.com). • Serving as the COO of ACAD since its inception in September 2021. • Design intricate career progression roadmaps and proficiency enhancement frameworks for professionals spanning all realms of cyber security. • Spearhead committee leadership roles, directing the planning, design, aggregation, and refinement of training initiatives tailored to professionals engaged in cyber security maintenance and operation. These programs encompass SoC (Security Operations Center) operation, incident response, intelligence analysis, penetration testing, secure development, vulnerability remediation, and more. • Innovate, develop, implement, and establish the Talent Quality-management System (TTQS) within the framework of ACAD.

• Proficiently guided and overseen a diverse team encompassing senior managers, managers, assistant managers, and administrators, orchestrating harmonious collaboration and achieving optimal results through astute leadership and meticulous coordination. • Oversee privacy management, information security, technology risk assessment, business continuity planning, corporate policy adherence, as well as local law and regulation compliance. This role also involves adept project management. • Direct the transition project for achieving BS10012:2017 certification, ensuring alignment with group-wide GDPR requirements and adherence to local GDPR regulations. Additionally, manage ISO27001:2013 certification processes. • Conduct training sessions, offer technical consultations, and investigate security solutions for local and regional project teams, as well as relevant stakeholders. This ensures that business projects adhere to principles of security by design, privacy by design, and business continuity. • Collaborate closely with the group's cyber security teams to formulate, monitor, evaluate, and enhance security controls mechanisms. This includes aspects such as security frameworks, security metrics, email/network DLP (Data Loss Prevention), antivirus measures, EDR (Endpoint Detection and Response), DDoS (Distributed Denial of Service) prevention, NAC (Network Access Control), security vulnerability scans, AIP (Azure Information Protection), vulnerability remediation, and more. • Work in partnership with the group's cyber security project teams to implement and deploy DevSecOps and CI/CD (Continuous Integration/Continuous Deployment) frameworks. • Collaborated effectively with the group's BCM (Business Continuity Management) teams and assumed a leadership role in managing the local incident response team. This ensured the seamless continuity of business operations, with subject matter experts drawn from critical functions within PCALT.

• Spearheaded and effectively managed a high-performing team of 2 professionals, orchestrating collaborative efforts and driving optimal outcomes through strategic leadership and seamless coordination. • Successfully implemented and upheld the ISO27001:2013 standard. • Oversaw comprehensive vulnerability management, including penetration testing, Fortify analysis, Qualys assessments, Nessus scans, and addressing the Poodle vulnerability. • Ensured the integration of security requirements into each project milestone, maintaining a cohesive approach through tools like Harmony. • Took charge of assessing, mitigating, approving exceptions for, and accepting information security risks that were relevant to the scope. • Carried out rigorous management reviews and conducted internal/vendor audits to validate security measures. • Provided instrumental support in the planning and execution of Business Continuity Management (BCM) and Information Continuity Management (ICM) activities, including drills and tests.

• BSI Lead Assessor of ISO27001(2013 and 2005), CSA STAR, ISO29100:2011 and BS10012:2009; • BSI training tutor for ISO27001:2013. • IRCA Lead Auditor of ISMS. • Carried out assessments and audits aligned with international standards for governmental and non-governmental organizations, as well as within the financial services industry and enterprise sector. • Facilitated training programs focused on ISO27001, delivering valuable insights to participants. • Assumed a leadership role as the project lead for information security compliance projects.

• Undertaking an in-depth exploration of statistical models for the Earthquake Forecast System.

Over the years of my PhD study, I have assisted in the “first year team project” courses and provided laboratory demonstration for the “computer network” courses.

• Thesis title: “Achieving privacy-preserving distributed statistical computation”. • Research interests: Privacy preserving distributed data computation & Network security. Publication: • Jun. 2010, A solution to privacy-preserving two-party sign test on vertically partitioned data (P22NSTv) using data disguising techniques”, Proceedings of the 2010 international conference on computational and statistical Science (ICCSS2010). • Sep. 2011, “A cryptographic solution to privacy-preserving two-party sign test on vertically partitioned data”, Proceedings of the 2nd international conference on electronics and information engineering (ICEIE2011). • Nov. 2011, “A cryptographic solution to privacy-preserving two-party sign test on vertically partitioned data”, Advanced Material Research, Volumn 403-408, Pages 1249 – 1257, Trans Tech Publications, Switzerland. • Apr. 2012, PhD Thesis, Title: “Achieving Privacy-preserving Distributed Statistical Computation”, School of Computer Science, the University of Manchester.

• I contributed to the 119 Call Centre project for the National Police Agency. This initiative encompassed the conceptualization and execution of the emergency call center, a real-time monitoring and recording system for major roadways across the nation, as well as a caller GPS location tracking mechanism.

• Spearheaded project management for IT solution projects across a diverse spectrum of clients, including governmental and non-governmental organizations, the financial services industry, and enterprise companies. • Devised and executed targeted IT projects, harnessing a range of network equipment such as Cisco systems, Juniper network systems, Checkpoint software technology solutions, Websense solutions, and more. • Crafted tailor-made network management courses, personalized to the needs of specific customers, and effectively delivered these training sessions.

• Orchestrated the management, configuration, maintenance, and troubleshooting of a diverse array of ISP network devices, encompassing data transmission, user access control, IP networks, and telephone networks. • Played a pivotal role in the initial phases of constructing the TFN Telecom network.

• The CMC ARP is widely recognized as one of Taiwan's premier special forces units. • Strategized and executed specialized military drills, coordinating intricate manouvers and tasks. • Spearheaded the organization of annual training programs, ensuring their successful implementation. • Crafted bespoke training documents and materials, tailored to the specific requirements of training initiatives.

• Thesis title: “Achieving privacy-preserving distributed statistical computation”, Software used for the thesis: Matlab. • An award from the “Computer Science Overseas Tuition Fee Bursary” in 2007 provided me with ￡9410 p.a. for three years

• Thesis title: “An efficient asynchronous recovery algorithm in wireless mobile ad hoc network”. • Lab demonstrator in computer laboratory.

• Lab assistant in computer laboratory