Srinivas Tatipamula

Principal Cyber Security Advisor

Profile Summary
Principal Cyber Security Advisor with over 20 years of experience. Initial experience as a System Administrator/Network administrator acquired as part of the infrastructure management team for over 10 years. Since 2003, career focus has been Cyber Security, Risk, Governance and Security Architecture consulting covering areas like; Information Security Audits, SOC, NIST Compliance Audits for Sarbanes Oxley, Consultancy for ISO 27001 implementation, Network Security and Enterprise Security Architecture and IT Security Strategy, also have worked on projects related to BCP/DR and PCIDSS Compliance. Broad experience with multiple industry verticals including Housing Mortgage, Banking, Financial Broking, BPO, Government, Automobile, Telecom and Logistics.

Skills and Proficiency:
• Global Security Practice • Security Architecture • Amazon Web Services (AWS), • O365, Azure Cloud Services • Data Privacy • IT Security, Compliance & Risk Management • Guidance on Securing Micro-Services and DevOps CICD Pipeline • Technical Feasibility Plans • Project Management • Financial Services Processing • Security Assurance • Compliance Requirements • Threat Modelling • Pen Test and Audit Remediation • Security Architecture • Technical Control Testing • AI Security and Governance • Security Frameworks – NIST Cyber Security, FFIEC, HIPAA and CSA.


Degree University / Institution
Masters in digital Forensics University of Maryland University College (USA)
Bachelor of Law Mumbai University (INDIA)
Graduate in Economics Mumbai University (INDIA)

Accreditations and Certifications
C-CISO EU Council (US)
CISSP ISC2
ISO 42001 Lead Auditor (ISO42001:2023)
Information technology — Artificial intelligence — Management system GSDC
ISO 42001 Lead Implementor (ISO42001:2023)
Information technology — Artificial intelligence — Management system GSDC
CISA (Certified Information Systems Auditor) ISACA (US)
CCZT Certificate of Competence in Zero Trust (2024 Certified) CSA (US)
CDPSE Certified Data Privacy Solution Engineer ISACA (US)
CISM - Certified Information Security Manager ISACA (US)
CGEIT Certified in the Governance of Enterprise IT ISACA (US)
CRISC – Certified in Risk and Information Control ISACA (US)
ISO 27001 Lead Auditor ISO27001:2013 STQC India
ISO 27001 Lead Auditor ISO27001:2022 STQC India
CCSK - Certificate of Cloud Security Knowledge V2 CSA (US)
CCSK - Certificate of Cloud Security Knowledge V4 CSA (US)
CCSK - Certificate of Cloud Security Knowledge V5 CSA (US)
ITILF V3 EXIN (NL)
PMP PMI USA

Other work and contributions
1. Worked on reviewing Cloud Security Alliance training and exam material for TAISE Trusted AI Safety Expert.

2. Working on Some of the publications from Cloud Security Alliance never version of CCM control matrix. and AI Controls Matrix.

3. Zero Trust Training (ZTT) Contributor
Earners of the Zero Trust Training (ZTT) Contributor badge have contributed to the content creation of the Cloud Security Alliance's ZTT courseware.

Zero Trust Training (ZTT) Contributor - Credly

4. Cloud Security Alliance Internet of Things (IoT) Working Group IoT Security Controls Guide Version Published March 2019

3. CSA IoT Controls Matrix March 2019

4. IOT Security Guidance on IOT from Cloud Security Alliance (CSA)

https://downloads.cloudsecurityalliance.org/whitepapers/Security_Guidance_for_Early_Adopters_of_the_Internet_of_Things.pdf

5. Security Guidance for Critical Areas of Embedded Computing

https://prplworks.files.wordpress.com/2016/01/prpl-security-guidance-for-critical-areas-of-embedded-computing-2-5-2.pdf

6. Identity and Access Management for the Internet of Things

https://downloads.cloudsecurityalliance.org/assets/research/internet-of-things/identity-and-access-management-for-the-iot.pdf