Kevin Nibler - Senior Manager, Security and Audit Services

Kevin Nibler, a CISSP, is a Senior Manager of Security and Audit Services at Canaudit. He has been with Canaudit for over five years and holds a Bachelor of Science in Computer Science from California State University of Northridge. Kevin is responsible for heading the company’s research and development. In this capacity, he directs staff in Canaudit’s efforts to identify new IT audit and security risks and develop new tools to automate audits.

Kevin is experienced in a broad range of penetration and security auditing techniques. Since starting at Canaudit, he has specialized in the audit and penetration testing of client’s Internet, web applications and web mail and has helped develop many of the tools used. He is also responsible for managing Internet audits, web application assessments and external vulnerability testing.

As a member of the Canaudit Penetration Team, Kevin is adept at identifying vulnerabilities. In the Windows environment, he is easily able to discover the single flaw in a machine that has the capability of compromising the entire domain. Kevin is also well versed in networking technologies. His work on Cisco, Nortel and Juniper vulnerability identification and assessment enables him to quickly determine needed improvements in client networks.

In addition to his capabilities as a member of the Canaudit Penetration Team, Kevin developed the Canaudit audit approach and security baseline regimen for Voice over Internet Protocol (VoIP). His approach enables the speedy identification of configuration flaws that can lead to the VoIP network being compromised. Kevin also developed and implemented the enhanced Canaudit Microsoft SQL audit approach. His software enhancements and scripts simplify the process of digging deeply into the database structure to assess the controls and suggest improvements in the configuration, security and other database controls.

Kevin has accomplished much during his career at Canaudit and continues to expand his knowledge in order to create the tools needed to pioneer innovative new techniques in technical auditing and IT security.