Sam Smagala is currently a Manager for MNP’s Cyber Security consulting team. Sam has a deep understanding of information security, networking, risk & compliance, offensive security, and incident response. This knowledge allows Sam to quickly and knowledgeably inspect system architectures, identify vulnerabilities, assess risks and recommend safeguards to reduce and mitigate risk to assets. His understanding of security and privacy policies, processes, procedures, and other controls allows him to assess and make recommendations on the non-technical aspects of security within an organization.
Sam has developed and currently leads MNP’s Cyber Incident Response client-facing service nationally; leading investigations, advising on containment and monitoring, and providing next-step recommendations to defend against and better prepare for incidents in the future. Sam also develops cyber incident response plans and playbooks for organizations in both corporate and operational technology environments, in addition to developing and leading tabletop incident scenarios for executive management and technical audiences alike.
Sam has a major passion for the secure state of critical infrastructure in Canada, America, and the rest of the world. Sam holds the following accreditations
• Bachelor of Applied Information Sciences – Information Systems Security from Sheridan College.
• OpenFAIR Security & Risk certification.
• US-CERT CSIH (Computer Security Incident Handler) certification.
• SANs GIAC GRID (Response and Industrial Defence) certification.
Sam, by invite only, additionally sits on GIAC’s Advisory Board.
Contact:
Sam.Smagala@mnp.ca
905-607-9777 ext. 269
Sam has articles in the following magazines:
2019 Q3 Issue
(August 2017, Saudi Arabia, an undisclosed oil and gas facility) Operational teams were busy working during regular business hours when alerts of many industrial control system shutdowns were received. These shutdowns were not planned or expected by plant workers and engineers, which caused some head scratching and troubleshooting in response to determine the unexplained cause. …
