Philip Sobol - Senior Security Consultant for Corporate Risk Solutions

About Us

Philip S. Sobol

Philip S. Sobol, CISSP, CISA, C|EH, CSSA, IAM, CNA, Has Completed Fundamentals of Auditing for NERC Compliance Course
Senior Security Consultant

Professional Experiences

Phil Sobol joined Corporate Risk Solutions in March 2002, as a Senior Security Consultant specializing in cyber security, penetration testing and technology-based computer forensics investigations. Mr. Sobol is also a recognized expert in critical infrastructure security in the area of NERC CIP standards compliance.

His responsibilities include: Security Risk Assessments and Analysis; Development of Security Risk Mitigation Strategies; Development and Implementation of Cyber Security Standards; Penetration Testing and Assessments; Computer Forensic Investigations; Cyber Security Governance Programs; Sarbanes-Oxley IT Security Compliance; Computer and Security Systems Audits; Technical Business Continuity Planning; Corporate Information Security Programs; Security Awareness Training Programs; IT Systems Risk Assessments and Policy and Practices Research and Development.

Certifications

Has Completed Fundamentals of Auditing for NERC Compliance Course
Certified Information Systems Security Professional (CISSP)
Certified Information Systems Auditor (CISA)
Certified SCADA Security Architect (CSSA)
Certified Ethical Hacker (C|EH)
NSA Certified InfoSec Assessment Methodology (NSA-IAM) Professional
Certified Novell Administrator (CNA)

Mr. Sobol is a Certified ProWatch Security System Programmer and Administrator and a Certified Lenel Security Systems Programmer and Administrator. Mr Sobol is also trained in Project Management, AutoCAD and Computer Forensics.

Mr. Sobol is an active member of the Information Systems Security Association (ISSA), the International Information Security Certification Consortium (ISC)2, the Information Systems Audit and Control Association (ISACA), the FBI InfraGard program and the High Tech Crimes Investigation Association of Kansas City (HTCIA). He is an observer with the Kansas Critical Infrastructure Protection Working Group which is comprised of electric utility companies in the states of Kansas and Missouri as well as the NERC Critical Infrastructure Protection Committee (CIPC).

“CRSI performed an onsite gap analysis of PPL’s CIP compliance program in advance of the required compliance date of 12/31/09. Consultants Mike Tibbs and Phil Sobol provided outstanding consulting service in a highly professional manner. They worked extremely well with the various PPL Subject Matter Experts and Counsel staff, patiently answering many questions and educating the staff on various CIP issues. Their knowledge and understanding of the CIP standards and related industry implementation issues enabled them to guide PPL in improving our CIP implementation strategies and our evidence of compliance to the many CIP requirements.

CRSI provided a detailed report of the gap analysis, providing PPL the opportunity to review the draft report and provide comments, prior to finalizing the report. CRSI also separately provided written responses to numerous written observations documented by Counsel and internal auditing during the course of the gap analysis. This was an unexpected benefit and was very helpful in addressing these internal comments. PPL is highly satisfied with the results of this CIP gap analysis and with the conduct and professionalism of the CRSI staff.”

Robert Hoopes
Senior Director of FERC / NERC Compliance
PPL Corporation