Gavin is the Professional Services Manager at RandomStorm and is responsible for devising and also delivering innovative testing services offered to clients, including the full range of penetration testing and social engineering engagements. Gavin has worked in IT for many years, focusing for the past five years on delivering internal and external penetration tests and social engineering engagements for multiple clients across all verticals.
Andrew is the co-founder and Technical Director at RandomStorm and is responsible for the formulation and execution of strategy for the technical department within RandomStorm. Andrew has over 20 years experience in IT with recent years focused on Internet security, offering board-level consultancy to numerous enterprise customers within disparate geographical regions. Andrew has authored several infosec titles for McGraw Hill and Cisco Press. His most recent publications have been focused on Firewalls and Threat Mitigation from common vulnerabilities. Andrew has also contributed to several books on networking topics as well as writing numerous articles for online and print trade journals and newspapers including the Sunday Times. Based in the UK, RandomStorm is a global infosec services consultancy providing turnkey solutions to organizations of any size. RandomStorm has offices in UK, US, Canada, Jordan and UAE.
Richard is a Senior Security Engineer for RandomStorm and is involved in the conducting penetration testing and social engineering assessments for clients across all verticals.

Introduction to Social Engineering
Why People are the Weakest Link in your Security
Basic Techniques, Deception, and Manipulation
Assessment Prerequisites
Reconnaissance: Building the Foundation of an Assessment
Ensuring Value Through Effective Threat Modeling
Designed Targeted Scenarios
A Model for Creating Plausible Situations
The Email Attack Vector - Spear Phishing
The Telephone Attack Vector
The Physical Attack Vector
Supporting an Attack with Technology
Difference between "Long Game" and "Short Game" Attack Strategies
Writing the Report
Creating Hardened Policies and Procedures
Reclassifying Information
Improving Physical Security Controls
Designing and Conducting Effective Staff Awareness Training
Internal Social Engineering Assessments