Professor of Cyber Security, AI and Blockchain
Every generation of technology arrives before the engineering discipline that would make it safe to use. I have spent thirty-five years supplying that discipline — first for software reuse, then the cloud, then security, now AI and blockchain.
And, unusually for a professor: a currently certified IASME / NCSC Cyber Essentials, Cyber Essentials Plus and IoT Assurance assessor, and Cyber Advisor. I assess real organisations against real controls every week, which is where the research gets tested.
Frameworks and methods a practitioner can pick up and apply, rather than observations about a phenomenon.
Producing judgement, not recall. Students will spend a career making decisions under uncertainty, with incomplete information.
Graduates now hold chairs and senior industry posts in the UK, Sudan, Jordan, India and beyond. Voted Postgraduate Research Supervisor of the Year in the Golden Robes awards.
Twelve authored, sixteen edited, forty-five chapters. A textbook adopted onto a programme reaches every student who takes the module, for years.
Volume 1 — Principles, Frameworks, and Practical Implementation
978-3-032-17366-9
View →Volume 2 — Emerging Technologies, Ethics, and Societal Impact
978-3-032-25873-1
View →Principles, Practices, and Frameworks for Responsible AI
978-981-95-2908-7
View →Security, privacy, governance and sovereignty as design problems
978-0-443-48511-4
View →Secure and Sustainable Frameworks for Healthcare Applications
978-981-96-4359-2
View →AI for Modern Software Engineering (Springer) · AI for Software Testing of Modern Applications (CRC) · AI for Software Engineering Productivity and Quality (Elsevier) · A Clinical Guide to AI in Healthcare and Strategic Guide to AI in Healthcare (Routledge)
The part that keeps the research honest. I see where national guidance breaks down, because I watch it break down.
IASME / NCSC certified assessor for Cyber Essentials, Cyber Essentials Plus, IoT Cyber and IoT Assurance, and NCSC Cyber Advisor. Assessment, technical verification and remediation for UK SMEs, charities and professional-service firms.
Lead assessor for UK GDPR and data protection audits, including a multi-department programme producing eight formal findings reports and a cross-organisational risk analysis.
Nessus and Qualys-driven remediation across client estates — CVE-2013-3900 WinVerifyTrust, unquoted service paths, AutoPlay and account hardening.
Architect and delivery lead of the Forti5 assessment platform: a SaaS product combining assessment workflow, agent-based host scanning and vulnerability reporting.
ISO/IEC 25059 (SQuaRE quality model for AI-based systems) within ISO/IEC JTC1/SC42. Co-creator of the BCS SIGiST component-testing standard, 1994 onwards. Board member, TMMi Foundation.
Founding Co-Chair of ABH 2026, the first International Conference on AI and Blockchain in Healthcare (Porto, July 2026), now an annual series. Conference Chair, SE-CLOUD 2018 and 2019.
Twelve years in industrial research, twenty-three in higher education, five in certified practice.
