My Profile

Contact Details

VP with Security and Operations Team,
Cognite
Conroe, TX

Ribbons

Ana Girdner, CISA,CISM

VP with Security and Operations Team,
Cognite

MyISACA Information

Bio

31 years prior employment with ExxonMobil, 8 years prior military service with the United States Army, and now expanding my skill portfolio with Cognite and their groundbreaking offering Generative AI Accelerator powered Industrial Data Ops platform. Currently serving as founding Fellow to the (CS)2AI - Control Systems Cyber Security Association International, and former Board Member to the Houston Chapter of ISACA Information Systems Audit and Control (2021-2022). Recently participated in the development of NIST Cybersecurity Framework Profile for Liquefied Natural Gas in 2022Proven history of bridging digital technology (such as Industrial Internet of Things and Edge computing) in process control systems and cyber security to meet ExxonMobil's business objectives in elevating operational safety and process reliability. Field experience in delivering a wide range of process control systems digital technology solutions from Turbine Remote Monitoring and Diagnostics system, Digital Enablement Platforms Third Party Remote Access, to a global implementation of a comprehensive industrial control systems cyber security program for ExxonMobil Upstream Division (onshore and offshore production operations in approximately 200 locations around the world). Instrumental in developing a comprehensive Engineering Functional Design and Specifications for one of ExxonMobil's international Joint Venture operations cyber security monitoring platform, to protect and defend its 7-LNG Train operations from cyber threats. Liaised with various US Department of Homeland Security and a Middle East Country's Ministry of Transportation and Telecommunications to define standards and policies in industrial control systems security. Worked with various turbine control systems vendors (GE, Solar) to develop purpose-built industrial firewalls (S3C, Tofino Read Only Controller Firewall) and remote access strategies to inhibit unauthorized alterations to turbine control systems. Currently establishing ExxonMobil's first process control system focused cyber incident event correlation infrastructure, and defining the cyber monitoring and investigation services to support ExxonMobil Upstream and Midstream's process control systems environment. Instrumental in the global implementation of a comprehensive industrial control systems cyber security program for ExxonMobil Upstream Division (onshore and offshore production operations in approximately 200 locations around the world). Recently completed an expatriate assignment providing oversightfor a multi-year corporate wide initiative to implement a Critical Infrastructure cyber security program for one of ExxonMobil's Joint Venture partners in an international location. Developed a technical and strategic security center approach and design for threat monitoring, incident prevention, risk mitigation, response and recovery. Providing Executive Management guidance and stewardship on regulatory compliance, characterization of ICS systems risk profile and its relationship to process safety and operational reliability. Developed ICS specific risk assessment methodology and tool with over 200 standard ICS related scenarios and risk mitigation. Led the team that conducted over 100 ICS risk assessments that provided full clarity on organization's risk prioritization and gap remediation. Developed long term strategic approach to managing and sustaining ICS security program across all of ExxonMobil's upstream sites. Developed system securitypolicies, procedures, work practices and held training workshops on industrial control system security. Conferences and speaking engagements included keynote speech in GE's Supplier ChainSecurity Meeting in Florence, Italy, presentation toICT QATAR's Energy Related Expert Committee in Qatar, Gulf Intelligence R&D Forum panelist, US Department of Homeland Security ICSJWG meeting in Indiana in June 2014.

More About Me