Michael Tallent

About Michael Tallent

With over 13 years of experience as a Chief Information Security Officer in the electric…

Experience

1. Managing Director and Chief Information Security Officer

   Duquesne Light Company

   Jul 2016 — Present

   As the Chief Information Security Officer, I am accountable for developing and implementing Duquesne Light’s information security strategy and program. I am responsible for working with company leadership to create a culture of information security awareness among employees, partners and vendors. I am responsible for evaluating and implementing information security technologies and concepts to protect information assets and industrial control systems. I have developed and staffed an organization which is responsible for enterprise wide cybersecurity operations, engineering, IAM, IT governance, risk management and compliance. I am responsible for ensuring the Company maintains compliance with all regulatory standards and most specifically NERC CIP regulations. Recent major accomplishments include the implementation of a new SCADA Energy Management System with supporting NERC CIP controls. These controls include a new Security Event Management system, a configuration monitoring system, an IT Service Management platform, a Privileged Access Management solution and an Intrusion Detection Solution. In addition, I have overseen the implementation of a new Enterprise Identity and Access Management solution, IT Risk Management Program, Supply Chain Risk Management program and Threat Intelligence and Information sharing program.

Education

• The University of Tennessee at Chattanooga

  MBA, Business Administration

  2004 — 2007

• Middle Tennessee State University (MTSU)

  B.S., Aerospace Technology

  1992 — 1997

• Middle Tennessee State University (MTSU)

  B.A., Computer Information Systems

  1998 — 2001

• Vanderbilt University Owen Graduate School of Management

  Leadership and Management for Accelerated Performance

  2012 — 2012

Skills

• Information Assurance
• Computer Forensics
• Information Technology
• Enterprise Software
• Renewable Energy
• Management
• Nist
• Risk Management
• Incident Response
• Networking
• Strategy
• Policy
• Fisma
• Integration
• Electric Power
• Computer Security
• Identity Management
• Governance
• Security Audits
• Energy
• Security Management
• Vulnerability Management
• Nuclear
• Electricity
• Leadership
• Pci Dss
• Cissp
• Penetration Testing
• Enterprise Architecture
• Ami
• Power Generation
• Nerc
• Smart Grid
• Intrusion Detection
• Business Continuity
• Security+
• Smart Metering
• Information Security Management
• Firewalls
• Network Security