Paul is an independent consultant specializing in IT governance, IT due diligence, IT audit and project risk management. He acts as adviser on strategy and on IT governance to risk management consultants Protiviti. He is a UK Chartered Accountant and a Chartered Information Systems Professional. He is Strategy Chair for ISACA. He serves also as Vice- Chair of the IT Faculty of the Institute of Chartered Accountants in England and Wales. He is a regular writer and contributor to a number of publications including the IS Control Journal, Chartech, Computer Weekly, and InfoSecurity. His blog (www.computerweekly.com/blogs/it-governance) has a loyal and active global following.