Dr. Sarwat Nafei, PhD, CISSP, CISA
Dr. Nafei has more than 30 years of corporate experience in the Cybersecurity Advisory, Emerging Technologies and Audit field, he is an active member of The IS Audit and Control Association (ISACA) and The International Information System Security Certification Consortium (ISC)². Through his service with the Big 4 (Deloitte, E&Y, KPMG) and subsequently as a VP for a Fortune 500 organization in Canada, he has developed extensive capabilities in the Enterprise risks and vulnerability assessment, Cybersecurity, AI, Management Consulting, and Policy Development. As a strategist he helped multiple governments in developing their Critical Information Infrastructure and Security strategies, as well as for the fortune 500 corporations in developing their Strategic Management approaches. Possessing a unique blend of strong educational background and experience, along with exceptional business and managerial skills; Dr. Nafei was chosen as a representative and advisor to the United Nations for Cybersecurity Strategies, taught at well ranked universities i.e. Waterloo University, York university, Toronto School of Management, Sakarya University and others for undergrads as well as graduate programs and EMBA. Dr. Nafei served as a Senator at the parliament in the National Defense and Foreign Affairs committee between 2011-2013. He is a frequent guest at international media outlets (i.e., CNN, Al-Jazeera, BBC, France24…etc.). Professional Experience Sarwat’s industry experience includes exposure to a combination of local and multinational organizations in Banking, Insurance, Industrial and Automotive, Chemicals and Pharmaceuticals, Consumer Products, Food and Beverage, Energy and Natural Resources, Government and Healthcare sector. Engagements and practical experience in which Sarwat was involved includes:
Led Emerging Technology Committees, several IT audit and Security advisory engagements to clients across the public sector, Financial services, Manufacturing, and Telecom industries
Specializing in the risk identification, strategic management and control design within technology processes in different market industries in accordance with the international standards i.e. Sarbanes-Oxley
Led the development and implementation of Security frameworks and risk management
Developing and maintaining the information security strategy and roadmap in accordance with the client established organizational information security goals and objectives.
Advise clients on the development and implementation of policies, standards and guidelines related to their industry regulations.
Examining all levels of the organization to anticipate, understand and manage a broad spectrum of strategic and operational risks (i.e. BCP, DRP).
Managing, planning, and budgeting large projects nationally and abroad
Performing security and privacy consulting engagements
Leading third-party reporting (SAS70, S5970) engagements Education and Professional Certifications PhD in Strategic Management Leicester Business School, De Montfort University-UK Post graduate studies from Manchester University-UK MBA (Master of International Business Administration)-France B.Sc. in Electronics and Telecommunications CISA Certified Information Systems Auditor. CISSP Certified Information Systems Security Professional. PSEC2 Certified PointSec System Engineer.
Research Publications: Consistently publishing in internationally recognized, peer reviewed journals.
The overall research theme is strategy-making and cybersecurity but can be broadly defined into the following research categories across both the private and public sectors:
Strategic decision-making (planning and improvisation; emergence; failure)
Strategic entrepreneurship
Resources, capabilities, and dynamic capabilities Academy of Management Global Proceedings Journal Nafei, S. (2020), “Cybersecurity strategy and Decision Making; examination from dynamic capability and judgment-base
