James Tarala is a principal consultant with Enclave Security and is based out of Venice, Florida. He is a regular speaker and senior instructor with the SANS Institute as well as a courseware author and editor for many SANS auditing and security courses. He has had the privilege of being one of the lead technical editors for the Center for Internet Security's Critical Security Controls and authored other resources such as the Open Threat Taxonomy. As a consultant, he has spent the past few years architecting and assessing large enterprise IT security and infrastructure architectures. He often performs independent security audits and assists internal audit groups in developing their internal audit programs.