Michael Cheung

- Direct CLP's intelligence-led cybersecurity program (encompassing IT & OT environments) to ensure comprehensive protection of critical assets ("Crown Jewels"); - Lead the collaboration with SB to formulate a strategic roadmap for compliance with critical infrastructure legislation, including CCS protection and the compliance to the Code of Practice; - Architect and implement a robust cybersecurity framework, aligning processes with risk-based methodologies to mitigate evolving threats; - Oversee end-to-end incident response and crisis management protocols, ensuring rapid containment and organizational resilience.

- Formulate cyber security strategy for 30+ BUs under the Group including cyber security architecture, cyber threat intelligence framework, monitoring and response methodologies, access control process, email security principle, security governance and cyber crisis response process, etc. - Supervise the Global SOC Team to offer 24x7 monitoring and response for 30+ BUs around the globe. - Design threat intelligence-based methodology to support the detection and response process. - Manage the cyber threat intelligence program covering brand protection, attack service management, vulnerability management, threat landscape assessment, credential leakage, threat hunting, etc. - Organize cyber crisis simulations for the management of 30+ BUs around the globe, elevating security readiness of company management. - Evaluate cyber security requirements to support the business objectives of the Group.

- Served as the section head of the Cyber Intelligence Division. - Implemented innovative methodologies and big data analytic systems to combat cybercrime. - Mounted and coordinated transnational operations. - Analysed intelligence feeds to unveil potential threats. - Partnered with University to design and develop solutions to detect phishing emails.

- Managed the digital forensic section to achieve the certification of ISO 27001. - Initiated and designed a digital forensics complex. - Implemented new digital forensics workflow and solutions. - Compiled and screened witness statements and affirmations for court cases. - Trained digital forensic examiners to obtain reputable qualifications (i.e., CISSP, CISM, CISA, EnCE, CCME, ICMDE, CHFI, etc.)

- In-charged of the Force’s cyber security units to perform incident response and to conduct security audits against the systems of critical infrastructures (i.e., banking institutes, Government B/Ds, telecommunication companies, transportation entities, and public utilities). - Designed framework and methodologies to enhance the performance of the Force’s Security Operations Centre (SOC). - Organised campaigns to promote cyber security to the public. - Led the investigation of a wide range of criminal cases, particularly cyber and commercial related cases.