Tom Andreas Mannerud
Tom Andreas Mannerud is an Information Technology Manager, Information Security Practitioner, Educator, and Software Author. Born and raised in the Kingdom of Norway, Tom now lives in beautiful Tampa Bay, Florida.
Welcome to my website. I created this site as a platform to share my contributions to the information technology and information security communities. You may have arrived here because you have come across one of my freeware applications or perhaps you have seen my commentary somewhere on some security forum. I frequently contribute to security related discussions online both here and overseas, especially around the topics of Digital Forensics and Incident Response (#DFIR), Security Auditing, and around Security Awareness. I hope that you will find the content and resources on the site to be worthwhile and I welcome any comments and discussions.
I currently work for a global organization as an Enterprise System Administrator (IT Security Manager) with special focus on Information Security and Assurance. As the lead for the Information Security Program my responsibilities spans the entire spectrum of administrative, technical, and physical security controls as they relate to protecting a global enterprise.
Before taking on IT Management and Security roles on land, I used to work as a Senior Information Systems Manager for the world’s largest cruise line. Being a native Norwegian working at sea came naturally to me. I loved waking up and smelling the salty ocean breeze and loved watching the sunsets at the end of every workday. But, working at sea was tough with 12-14 hour workdays, 7 days a week, for up to 6-7 months at a time. As a Senior Officer, I supervised and led a multi-national team providing first, second, third level support of back-office desktops, wireless laptops for embarkation, point-of-sale (POS) terminals, 60+ specialized applications and systems, and the support of the in-cabin interactive information and entertainment systems in addition to managing the shipboard data center, network infrastructure, and satellite communications. Together we supported the technical infrastructure and applications for all departments onboard including but not limited to Deck, Engine, Security, Hotel, Accounting, Food & Beverage (Galley, Dining Rooms, Room Service, Bars), Audio Visual, Gift Shop, Casino, Infirmary, and Spa. During the latter part of my time at sea I was selected by upper management to mentor and train new and existing technical team members and was later a Project Supervisor/Liaison for special fleet projects.
My credentials in the field of Information Security includes a Master of Science degree in Information Security and Assurance from the prestigious Western Governors University were I also received the Capstone Excellence Award for Synergy and Service for my work titled Creating a Security Culture: A Guideline to Security Awareness. I later authored The Security Awareness Cycle based on my work on Creating a Security Culture and published it under a Creative Commons Attribution license. The Security Awareness Cycle is now used by security practitioners and organizations around the world to help change high-risk behaviors and reinforce desired behaviors. In addition to my graduate degree, I have a Bachelor of Science in Management Information Systems from the University of South Florida. I also maintain several professional certifications and memberships:
Master of Science in Information Security and Assurance
Bachelor of Science in Management Information Systems
Certified ISO-27000 Specialist from Global Information Assurance Certification
Certified Computer Hacking Forensics Investigator from EC-Council
Certified Ethical Hacker from EC-Council
NSTISSI-4011 National Training Standard for Information System Security (INFOSEC) Professionals from Committee on National Security Systems (CNSS) / National Security Agency
CNSSI-4012 National Information Assurance Training Standard for Senior Systems Managers (SSM) from Committee on National Security Systems (CNSS) / National Security Agency
I have tutored and taught at corporate training centers, high-schools, and colleges in addition to having been a subject matter expert providing guidance to students for various Directed Studies.
Again, I hope you enjoy the contents of the site. Make sure you check out my freeware applications, my Security Awareness posts, and my blog articles. If you would like to contact me directly you can do that using the contact form. I am looking forward to your comments and to our future discussions.