Jo's areas of expertise include information security governance and strategy, development of policy, security awareness and education, ISO 27000 series implementation and advice, risk assessment, systems audit.