Bill Hau - VP of Consulting
Foundstone Role
Bill Hau is Vice President of Professional Services at Foundstone, the leading global information security software, services and education provider, employing one of the world’s largest talent pools of security experts ever assembled. Foundstone empowers large enterprises, including US government agencies and Global 500 customers in financial services, technology and other industries to continuously and measurably manage and mitigate risk to protect their most important digital assets from critical threats.
Experience
Bill has extensive experience in Security Consulting, having run consulting teams for leading security consulting groups serving blue chip clients in both the US and Europe. His work has included most industry sectors, including Defense, Electronics & Software, Finance, Automotive, Healthcare, Consumer Products and Retail. Bill provides the deep technical skills to assess, architect and implement technical security solutions for his customers. As well as performing and leading technical work, his engagement experience includes incident response, strategic planning, risk assessments and security management for global corporations. His operational security management roles include security manager for a major UK bank during a complicated business merger, and global security manager for one of the largest brewers in the world, where his responsibilities included creation, transition, and transformation of the group’s global information security infrastructure.
Notable Accomplishments
Bill has proactively contributed to the Open Web Application Security Project (OWASP) project and helped organize the successful 1st Conference in NY in 2004 and the follow-up conference in London in 2005. The Open Web Application Security Project (OWASP) is a highly acclaimed reference point and source of thought leadership for developers and system architects. OWASP material is recommended reading for the US Federal Trade Committee.
Certifications and Training
Bill holds the CISSP (Certified Information Systems Security Professional) qualification and is a member of the IISP (Institute of Information Security Professionals)
Professional Education
He has an MS in information security from the renowned Royal Holloway, University of London, where he specialized in advanced cryptography.

