Darek Milewski has been an information security, risk management, business continuity and Web-strategy consultant for more than a decade. His expertise includes the design and implementation of network strategies and technologies through all levels of security assessment, including many projects to comply with guidelines for NER CIP, SOX, HIPAA, and GLBA. As IOActive's Managing Director of Advisory and Risk Management, Mr. Milewski helps to align technology security measures with the business objectives of each client, protecting their most valuable assets while contributing to the bottom line with recommendations that increase efficiencies and make best use of existing and emerging technologies.
Mr. Milewski has helped clients in many industries, but chiefly software development, healthcare, telecommunications, and financial institutions. While at a public accounting firm, he helped large software company prepare for SOX certification, testing the specific controls and internal application assurance processes. He also assisted in project design of a large software development corporation’s Information Security Program.
Mr. Milewski is a seasoned IT security leader who regularly contributes to the knowledge base of security interest groups. He spent several years directing risk management projects and initiatives with a Big Four public accounting firm, and has created and implemented countless methodologies in a number of settings. He has performed network administration, management, and security services for well-known organizations including Charles Schwab, Oracle, PricewaterhouseCoopers, and UC Berkeley. While at UC Berkeley, he rescued a lost book of poetry files for a Nobel Laureate.
Also known as an "Internet pioneer," Mr. Milewski spent many years predicting and preparing clients for new developments in capabilities and uses of the Internet. At Charles Schwab, he developed an intranet model that helped spawn one of the most utilized sites in history: Craigslist. During his time in Poland, Mr. Milewski became one of a few nationally-recognizable information security experts, and did much to raise awareness and understanding of security issues arising from changes in technology and use of the Web. He continues to educate clients and the public on methods for designing safe, high-functioning networks.