Tom Olzak is a security researcher for the InfoSec Institute and an IT professional with over 27 years of experience in programming, network engineering and security. He has an MBA as well as CISSP certification. He is currently an online instructor for the University of Phoenix. He has held positions as an IS director, director of infrastructure engineering, director of information security, and programming manager at a variety of manufacturing, health care, and distribution companies. Before joining the private sector, he served 10 years in the United States Army Military Police with four years as a military police investigator. He has written two books, "Just Enough Security" and "Microsoft Virtualization." He is a frequent contributor of security management papers for CBS Interactive and the Infosec institute.