Michael Bache, CISMP, PCIRM

Accountable for leading the delivery of Network and Security services across a portfolio of major accounts. Spanning multiple teams, vendors and technologies, whilst managing the continuous improvement & transformation of contracted products & services. • Responsible for the strategic delivery of multiple Network & Security services to 64+ high value customers across multiple sectors. • Responsible & accountable for the people management of 40+ FTE across 4 teams; including recruitment, coaching and performance management. Whilst building and mobilising high-performing teams and enhancing operational effectiveness. • Establish and maintain strong working relationships with customers, suppliers and business stakeholders to ensure that our services are continuously supporting them in meeting their own strategic targets. • Leading the continual improvement of contracted services and operational processes, increasingly improving our services effectiveness and surpassing our obligations throughout the contract lifecycle. • Evaluating service & team performance against the contractual SLA’s, and internally agreed KPI’s; formulating service improvement plans where required. • Identifying Risks to service, assessing implications and treating Risks appropriately as per the businesses and customers Risk appetite. • Directing Major Incidents, ensuring there are clear lines of accountability and concise resolution plans leading to prompt service restoration. • A senior point of escalation responsible for managing all critical service issues whilst ensuring KPI's are met and maintaining strong customer relationships.

As Head of Complex Cyber Operations it is my responsibility to ensure that the globally sold Security products and services within my teams scope are managed in life to the agreed contractual requirements. I ensure that this is done to the correct security, cost, quality and time bound requirements, setting the teams strategic direction whilst improving on our customer services. • Responsible for executing against the strategy of Global Commercial Cyber Operations to facilitate successful execution against the pipeline of demand. • Accountable for the growth and leadership of a global team of security operations experts in the optimisation / operations/ Training fields. • Responsible for creating and maintaining collaborative working relationships with our customers ensuring that BT’s services meet their complex Security requirements. • Responsible for the Global Security Optimisation Service. Focusing on advocating BT's security products and the strategic direction of the customer. Undertaken by a team of global Security Optimisation Professionals. • Accountable for the provision of BT’s Advanced Security Operations Services, provided by a team of 3rd line Cyber Security experts. • Responsible for the overall development of the BT Security Service Design and Delivery technical training team and budget.

My role ensured that all new Cyber Security products and services pass through and adhere to the strict and thorough governance processes; Product Launch Readiness and Acceptance Into Service. As the role holder I ensured that this was done to the correct security, cost, quality and time bound requirements (improving year on year), whilst setting the strategic direction for the Security Service Transition team. • Accountable for governing and executing the strategy of BT Security's product launch roadmaps. Successfully facilitating the strategic launch of all new products onto BT's portfolio. • Accountable for successfully driving the standardisation of the Product Launch Readiness (PLR) and Acceptance into Service (AIS) processes whilst following industry best practices, such as ITILv4 and ISO27001. • Accountable for the governing, collating and reporting of all product and design KPI's. Feeding directly into both Security and Global scorecards. • Accountable for creating and maintaining collaborative working relationships between all accountable areas within the C2M processes. • Lower and control cost through reduced product launch timescales. Achieved through robust governance and continuous improvement of end to end cycle. • Growth and leadership of a globally responsible team of experts in the BCM / PLR / AIS field. • Responsible for and approver of the technical training budget for Service Delivery globally. • Owner of the Security Design and Architecture Business management function. Including the BRF, efficiency, recruitment and training plans.

As Head of Risk Management my Role was to ensure that the businesses Risk Management strategy was implemented and managed effectively across Service Deliveries 4 disciplines, bid, design, delivery and operations. As the role holder I ensured that this is done whilst complying with the most up to date industry standards, such as ISO27005:2018. Accountabilities: • Accountable and responsible for the central collation and effective management of all Risks within Service Delivery. • Accountable for the implementation of countermeasures to ensure that the Confidentiality, Integrity and Availability of our Data and Assets is upheld. • Accountable for the review and assurance of all new opportunities. • Leadership of the Service Delivery Risk Management team- ensuring that the team delivers as per its strategy, whilst maintaining Security standards and industry best practices. Whilst doing so in a cost effective manner. • Supporting the relevant design, delivery and operational teams in the effective management of Risks throughout their lifecycle. • Training lead and owner of the global training budget for Security Service Design & Delivery. • Business Operations lead for Security Delivery, Design & Architecture. Leading on Efficiency, recruitment and budget management.

A Cyber security manager responsible for the monitoring of large customer network’s as well as providing the management and analysis of security incidents. Also a secondary role as a SIEM content developer working within a service delivery role driving for the successful integration and monitoring of new customers. Responsibilities: • Management of a team of cyber- security professionals responsible for delivering a secure cyber capability to customers. • Successful management and delivery of cyber-security platforms for Multi-national and government based customers; tools included Skybox, agileSI, HP TippingPoint as well as SIEM tools ArcSight and SPLUNK. • The SME for various SIEM tools used within the SOC. • Management of all customer cyber security incidents. To investigate and resolve and where necessary report incidents involving potential or actual breaches of protective security compliance. • Responsible for identifying and managing risks in accordance with the customers security policies and provide consultancy where required. • Providing a deep analysis for all customer security issues and providing expert advice to the customer on remediating all issues. • The creation and development of processes, work instructions and other documentation to an ISO27001 standard. • To meet agreed SLA's, in relation to the contractual service provided by BT Security. • Building and maintaining relationships/partnership with customers, suppliers and stakeholders ensuring the cost effective provision of a professional Security service.

A security conscious and trained analyst who provides protective monitoring to HMG GPG13 standards whilst working on BT’s secure IL3 platform. • Leader of the 24x7 protective monitoring analyst team. • To monitor various secure IL3 platform's as well as various external secure customer networks for security vulnerabilities or possible attacks from either internal or external sources. Whilst following all security guidelines as laid out by the HMG GPG13. • To interrogate any security incidents or alerts using the SPLUNK SIEM tool. • Produce and maintain various reports/ alerts/ use cases within the SPLUNK search head. • Managing any high level security incidents from beginning to resolution, involving all relevant departments within BT. • Monitoring various technologies and operating systems including Cisco, Checkpoint, Linux and Windows. • Trained on Baron McCann X-Kryptor secure encryption devices. • Undertaking various management responsibilities as well as covering higher management’s responsibilities when required. • Document and process writing for various bespoke contracts and Protective monitoring roles.

A customer facing technician supporting bespoke data and IT based communications services to a specified group of external global / corporate customers based in the Central Network Operations Centre. This role encompassed, • Customer services, enquiries, first and second line fault diagnosis / resolution, problem management and order / change implementation. • To meet or exceed bespoke / customer specific SLA’s, contractual agreements and internal performance measurements / standards. • To maintain and enhance working relationships with customers, suppliers and other BT business units. • To undertake network surveillance using a range of network management systems and tools, to identify and analyse root cause and repeat faults trends. • To accurately log, update, escalate and close event management tickets in a quality and timely manner. • Undertaking the role of team leader, during which time I was responsible for the delivery of a new service to a new global customer.

• A multi-skilled engineer responsible for the provision and maintenance of BT’s core network. Skilled in four main areas, Transmission (first and second line), System X switch (first, second and third line), 21cn and internal construction. • Took on the team leader role with a number of management responsibilities. • Fully conversant in the use of BT’s work delivery systems, databases and network management tools. • Active in training the Modern Apprentices in first and second line transmission and system x switch technologies. • Responsible for leading on and delivery of key projects.

• Successfully trained as a BT Modern Apprentice. • Specializing in the Provision and Maintenance of BT’s core network, first and second line. • Successfully completed BTEC (Merit Grade) and NVQ Level 3.