Dear Sir/Madam Assalamu Alaikum warahmatulahi wabarakatu My name is Mohammad Shafique, I leave and work in London. I have qualification and many years of experience in driver training industry and IT Consultancy. In my last visit to Pakistan 2016, I’ve realised that there is no organisation which sets the standards for learner drivers, instructor and examiners. In existing system if the learner driver can drive the car forward and reverse trough the set of cones he passes the test and given driving licence. How can we trust this NEW DRIVER on public roads, who is not been TESTED on public roads by the official driving examiner. In UK people fail there driving test, it’s not because they can’t drive the car, it is because they can’t drive safely. In my opinion driver training industry is neglected in Pakistan or the government is unable to realise the potential of this industry to generate revenue, create job and above all train people to be safe drivers. I would like to propose a development of National Driving Standards Agency (NDSA) which will be responsible for the following;

NDSA will set driving standards according to national and international requirements. Establish National Driving Standards Agency (NDSA) training academy Register and licence all the driving instructor Provide necessary training to driving instructors Train driving test examiners All the driving test will connected by the NDSA approved driving examiners.

I’ve eager to something for Pakistan which helps the people of Pakistan and Pakistan. I can provide training and frame work for the above mentioned organisation. Please feel free to contact me if you need any further information. (moh.shafique@hotmail.com) Kind Regards Mohammad Shafique

Page 1

MOHAMMED SHAFIQUE 2 Tennyson Road, London RM3 7AD

Mobile: 079 7099 9668 Email: Moh.Shafique@hotmail.com

Career Profile

Certified in data privacy protection GDPR. Proven successes in addressing client security challenges with resilient, cost effective and innovative security solutions, in alignment with business objectives. Competency in security and data privacy risk treatment strategy & control frameworks, vulnerability management, incident management and security awareness.

Effective verbal and written communication skills to influence management, clients, peers & technical stakeholders to achieve common objectives.

I am dedicated to continuous practise improvement in the face of rapidly evolving and changing markets. I’m looking for opportunities to apply my extensive knowledge and skills to support business transformation and data privacy projects.

EDUCATION AND TRAINING Governance Risk and Compliance (GRC) 2017

Governance: ISO 27001:2013, UK Cyber Essentials Scheme; Risk: Acuity Risk Management (IRAM2) for risk register and status monitoring Compliance: EU GDPR and UK DPA data privacy; ISO 27001:2013 controls

Data Privacy 2017

EU-GDPR Foundation

CISSP Training 2015

A+, N+, CCNA Training 2008

University of Greenwich 2002 – 2005

Bachelor of Engineering, BEng: Computer Network Engineering Project management (Prince 2), Software engineering, CCNA, Programming

WORK HISTORY

IT CONSULTANT June 2015 – Current Smart Services Group

Stakeholder management:

I created & used communication plans that built trust and rapport with stakeholders, extending on-going projects and opening new project opportunities

For risk treatment, I collaborated with C-level to recommend & direct implementation of suitable and alternative controls for digital transformation, cyber security, compliance and data privacy plans, while addressing client concerns for solution cost, usability and agility;

Provided management reports to support risk decision making with risk exposure & control effectiveness reports

Security consulting and advisory:

Worked with client management team to help understand and document cyber security and data privacy compliance risks;

Created and implemented control framework to mitigate risks to acceptable (risk register)

EU GDPR readiness:

Data inventory

Classification & data flow

Subject access requests(SAR)

privacy awareness

Page 2

Data protection impact assessment (DPIA) Data retention policy

IT Consultant and Network Administrator Aug 2008 – June 2015 Al Tariq Engineering Consultancy (Muscat)

Skills Acquired:

Security project management:

Overseeing projects aimed at addressing IT control weaknesses and improvements sponsored by mgmt. team

Gathered security requirements & obtained sign-off for implementation Control of budget, risk & delivery schedules Managed project resources, objectives & performance Coordinated training and knowledge development

Security Incident & Events Monitoring:

Acting as key contact point, I facilitated risk mitigation and incident resolutions; Designed and Implemented incident workflows covering critical stages of detection; triage; event analysis;

correlation; alerting of response teams and stakeholders; As demanded, I facilitated evidence preservation and forensic investigation using specialist services Vulnerability scan & remediation monitoring. (MBSA)

DVSA Driver Training (sep 2006 – Sep 20140

Development and delivering training package according to needs of students learning to drive. It is a profession with a high level of responsibility that requires leadership, patience, confidence and excellent communication skills. I have applied these skills in delivery IT security risk management & security awareness.

Skills Acquired: Risk management and controls: Attention to details and early identification of threats and applying mitigating

actions Empathy: Motivate and monitor the progress of individuals personally and adopt a unique approach for teaching

at different levels. Adaptable: Creative methods of delivering instructions in classes to promote the interest of the learners. Ensure Time Efficiency: Ensures that at the end of the course, all the students are equipped with sufficient

knowledge. Proactive: Take initiative to go beyond the book of procedures. Easily spot problems before they unleash

themselves or their consequences and react quickly and safely to any problems.

Computer Network Administrator Sept 1999 – July 2005 Sun Foods Ltd

Skills Acquired:

Data protection act, 1998 (data protection principles) o Maintained compliance with UK DPA o Lawful processing of personal data with awareness

training; Data encryption at rest & transit Data retention policy and backups

o on-premise & cloud solutions 3rd party assurance

o ISO 27002 control standards questionnaire Incident handling & breach notifications Strategic Planning

Technical understanding of issues Troubleshoot printers and laptops Ensure anti-virus protection Design and Implementation of

technical security controls Problem Solving Network Performance Tuning Setup LAN Network Vulnerability scan (MBSA) Patch management based on active

exploits

REFERENCES

Available upon request.