Orvin Lau

Principal Consultant, Orvin Consulting Inc.

Orvin Lau is an Information Security professional with extensive experience in IT, project management and team management, with over 13 years of work experience as an IT professional. • Certified as an ISO/IEC 27001:2005 Implementation Consultant and Lead Auditor, and formerly as a PCI Qualified Security Assessor (QSA). • Strong understanding of information security management and processes. Experienced in frameworks used in information security, such as ISO/IEC 27001:2005, the PCI Data Security Standard, COBIT 4.1 and the NERC Critical Infrastructure Protection (CIP) Standard. • Sound manager of consulting and audit projects throughout the entire life cycle: from sales, initiation, budgeting and planning through to execution and delivery. • Adept at relating business requirements to technical requirements and vice versa. A breadth of conceptual technical knowledge applied to developing corresponding business requirements and needs, including networks, operating systems, databases, Public Key Infrastructure (PKI), and application development. Professional strengths: • Project management • Problem solving • Adaptability to new challenges • Ability to pick up new technical skills quickly • Able to work both independently and in a team setting • Team leadership • Business development