
Distinguished expert on information security management systems. Her main areas of interest are: - methods for information and ICT security assessments, - security processes and models’ development, - information security policy and information security management system development and implementation, - methods, development and integration of the risk management systems in organizations, - information and ICT security audits. Chair of Technical Committee no. 182 on Data Security in ICT Systems in Polish Committee for Standardization since 2006. Chair of the Information Technology and Communications Industry Council in Polish Committee for Standardization since 2012. Expert of the ISO/IEC JTC1 Subcommittee SC27 „Information techniques - IT Security Techniques” since od 1997 and editor of International Standards: ISO/IEC 27005 Information Security Risk Management (all 3 editions), ISO/IEC 27000 Overview and Vocabulary (all 4 editions), ISO/IEC 15408-1 Evaluation Criteria for IT security - Part 1: Introduction and general model (currently under review). Rapporteur for several Study Periods at SC27, currently - two running in parallel - on Cybersecurity Terminology in SC27/WG3 “Security Evaluation, Testing and Specification”, and at the SC level. Head of Polish delegation and expert for CEN/CENELEC/ JTC13 “CyberSecurity and Data Protection”. Editor of European standard on Lightweight Evaluation Methodologies. Translator for several ICT Security standards into Polish as authorized Polish Standards. Leading auditor of information security management systems and ICT systems with wide experience acquired in more than 100 security audits conducted in governmental agencies, and various industries including telecommunications, banking, insurance, energy (including one of the largest electro-energy distribution company in Poland) , gas (including the largest Polish pipeline operator), utilities and IT. Project Manager of 2 R& D projects under the EU Innovative Economy Operational Programme (POIG), line 1.4 on implementation of RFID technology in security components in remote authentication and inventory systems (years 2013-2015). Project Manager for the Project “Polish national schema for security evaluation and certification of ICT products” (2018-2021). Senior advisor to the Polish Minister of Digital Affairs, and Minister of Internal Affairs.