Carolyn A. French

Carolyn French is the Manager of Product Assurance and Standards, which includes the Cryptographic Module Validation Program (CMVP), at the Canadian Centre for Cyber Security (CCCS). Carolyn is the Canadian Head of Delegation to ISO/IEC JTC 1/SC 27/WG 3, and the lead editor of the ongoing project to revise ISO/IEC 19790. She has been participating in ISO standards activities since 2018.

Sal La Pietra

Sal La Pietra holds a computer science degree from the University of Turin - Italy (1982). He started as a software engineer in TCP/IP networking and OSI X.400 before being exposed to the information security field in 1988 with the first Internet Worm, also known as The Morris worm. After working in the infosec field for Sun Microsystems, Open Software Foundation (OSF), and IBM, Sal co-founded atsec information security in January 2000 with two other colleagues.

Stephan Mueller

Stephan Mueller holds a Master’s degree in Business Administration (1999) from the Technical University Dresden, Germany. Stephan Mueller currently works as a principal consultant and evaluator with atsec information security GmbH, Germany. His main responsibilities include evaluation of security aspects of IT products based on industry standards including FIPS 140-3 and Common Criteria. Consultancy services are provided for architecting secure products, especially in the Open Source and Linux realm as well as operating systems in general.

Eric Amador

Eric Amador is the Product Manager of the Thales Luna Host Security Module, trusted by the largest public and private organizations as their root of trust. He is in charge of crafting the product vision, delineating roadmaps, and driving product changes to meet evolving market needs. His strategic focus includes steering the product's compliance direction to satisfy top-tier security standards (FIPS 140-3 L3, CC EAL4+) and countering emerging threats, notably coming from the quantum computing advancements.

Dr. Marcos Portnoi

Marcos Portnoi is an electronics and information security engineer with a Ph.D. in Computer and Information Sciences from the University of Delaware. He has over 10 years of experience in the field of cryptography, network security, and secure protocols. He currently is Lab Director and Chief Information Security Officer at atsec information security, where he leads a team of experts in performing security evaluations and certifications of cryptographic modules, products, and systems.

Lisa Rabe

Lisa Rabe spent 15 years writing astrodynamics software for satellite tracking sensor systems. Ten years ago, she made a career shift and started working for a consultant in cybersecurity compliance. She managed a group that wrote a software test harness to test cryptographic libraries and got interested in the field of entropy. She started an industry-wide working group on entropy and is still running it five years later. In late 2021 she joined Cisco, doing Common Criteria certifications and working with both CC and FIPS on entropy issues.

Georg Stütz

Georg Stütz is Security Certification Expert and team lead at NXP Semiconductors based in Graz, Austria. Georg has worked in the security certification domain since 2012, on Common Criteria, EMVCo and other private certification schemes. Georg and his team are driving security certification for IoT and Automotive for instance by helping develop the SESIP certification standard. Georg studied Mathematics with Information Security at Graz University of Technology.

Swapneela Unkule

Swapneela Unkule holds a Master’s Degree in Computer Science from Texas State University, San Marcos. She has been working for atsec information security corporation, USA for over 10 years. Swapneela’s main responsibility is managing the CST lab which includes testing the security aspects of IT products based on industry standards, particularly FIPS 140.

Joachim Vandersmissen

Joachim holds a Master’s degree in Computer Science from KU Leuven, Belgium. As an IT Security Consultant at atsec information security corporation, he performs FIPS 140-2 and 140-3 testing, Common Criteria evaluations under the NIAP scheme, and Entropy Source Validation testing.

Bertrand du Castel

We invite you to read our blog article on Bertrand du Castel and his exceptional contributions to the field of smart card security. We took the opportunity to collect some deeply touching stories and insightful quotes from a few of Bertrand’s former colleagues and friends.