Alex Yao Alex Yao

Frameworks, tools, and credentials

My work spans governance, risk, and control. I have built the following skills along the way, and CISSP is planned

Frameworks, tools, and credentials

Frameworks & Regulations

  • ACSC Essential Eight Working knowledge
  • APRA CPS 234 Working knowledge
  • APRA CPS 230 Working knowledge
  • ISO 27001 Working knowledge
  • OWASP GenAI Security Working knowledge

GRC & Security Domains

  • Cybersecurity governance Working knowledge
  • Operational risk management Working knowledge
  • Business continuity management Working knowledge
  • Third-party risk management Working knowledge
  • AI risk governance Working knowledge

Data & Automation

  • Power BI Applied in production
  • Power Automate Applied in production
  • VBA Applied in production
  • SQL Working knowledge
  • Python Working knowledge

Core Competencies

  • Stakeholder engagement Working knowledge
  • Executive reporting Working knowledge
  • Control assurance Working knowledge
  • Risk assessment Working knowledge
  • Cross-functional collaboration Working knowledge

Certifications

  • Certified Information Systems Security Professional (CISSP)

    (ISC)²

    Planned for the next 12–18 months.

    Planned