Achime Afamefuna

Biography

Achime Afamefuna is a cybersecurity professional specialising in governance, risk and compliance (GRC), security assurance, and risk-based decision making within regulated and resource-constrained environments. His work focuses on the design, assessment, and continual improvement of cybersecurity governance frameworks that support organisational accountability, service resilience, and regulatory compliance, particularly in healthcare and public-sector contexts.

With experience spanning technical security engineering and governance-level assurance, Achime works at the intersection of policy, risk management, and operational cybersecurity. His approach emphasises proportionate, evidence-based controls that align cybersecurity investment with organisational risk appetite, statutory obligations, and service delivery priorities. He has contributed to research examining how public-sector organisations, including NHS bodies, can manage cyber risk effectively despite financial pressures, legacy infrastructure, and workforce constraints.

Achime actively contributes to thought leadership through academic and practitioner-focused publications addressing healthcare cybersecurity, information security management systems, and the human factors influencing cyber resilience. His research and advisory work reflects a commitment to strengthening cybersecurity maturity across public services by integrating governance, assurance, and emerging technologies such as artificial intelligence, connected medical devices, and operational technology systems.

Articles & Publications

• Cybersecurity Challenges in Healthcare Resource Management Using the NHS as a Case Study (2025) – LIGS University
• Budget Constraints and Cybersecurity in Healthcare: Achieving Security with Limited Resources (2024) – LIGS University
• Zero Trust Security Models for Cloud-Driven Organizations
• Generative AI in Cybersecurity: Opportunities and Ethical Risks
• Addressing Cyber Threats in Autonomous Vehicles and Connected Mobility Systems
• AI in Healthcare Cybersecurity: Enhancing Threat Detection and Response
• IoT Devices in Healthcare: Balancing Patient Care and Cybersecurity Risks

Selected Publication Links:

• cybersecurity-challenges-healthcare-resource-management
• budget-constraints-and-cybersecurity-in-healthcare

Books & Patents

Books:

• The Economics of Cybersecurity: Balancing Risk and Revenue – Co-authored with Prof. Nwabueze Achime & Afamefuna Achime. An analytical examination of cybersecurity investment, organisational risk appetite, and the financial implications of security decision-making.
• The Cyber Con: Psychological Manipulation in the Digital Age – An exploration of social engineering, cognitive exploitation, and behavioural manipulation in modern cybercrime and digital influence operations.

Patents:

• Savi Autonomous
• Public Transportation Black Box for Enhanced Security

Key Contributions & Achievements

• Advisory and research work addressing cybersecurity challenges in healthcare systems and public-sector environments
• Analysis of budget constraints and their impact on security controls, resilience, and risk prioritisation
• Development of risk-focused approaches to cybersecurity governance and compliance
• Contributions to academic and practitioner-focused publications addressing real-world cybersecurity challenges
• Application of governance and assurance principles to emerging technologies, including AI, IoT, and autonomous systems

Expertise & Skills

Core Specialties:

• Governance, Risk & Compliance (GRC)
• Security assurance and control validation
• Audit readiness and regulatory alignment
• Healthcare cybersecurity risk management
• Policy and framework implementation (ISO-aligned)
• Cybersecurity engineering
• OT / Industrial Control Systems cybersecurity expertise

Standards & Frameworks:

• IEC 62443
• NIST SP 800-82
• Zero Trust Architecture
• Critical Infrastructure Security

Industrial Networks & Protocols:

• Modbus, OPC, IEC-101/104
• TCP/IP, VLAN, Ethernet

Security & Monitoring Tools:

• Nozomi Networks
• Microsoft Defender for IoT
• Splunk, QRadar, Suricata, Zeek

Qualifications & Certifications

Key Qualifications & Certifications:

• CISM (Certified Information Security Manager) – Focus on information security governance, risk management, and programme oversight
• ISO/IEC 27001 – Information Security Management Systems (ISMS) – Practical application of ISO 27001 requirements, controls, and continual improvement
• Governance, Risk & Compliance (GRC) – Enterprise risk management, regulatory alignment, policy development, and control assurance
• Security Assurance & Audit Readiness – Internal and external audit preparation, gap analysis, and control effectiveness reviews
• Risk-Based Decision Making – Translation of technical risk into executive-level and business-focused insight

Cloud, AI & Professional Certifications:

• AWS – Security Specialty
• Azure Security Engineer
• Azure AI
• Google Cybersecurity Professional Certificate
• Scrum Master I