I have a passion for crafting cyber defenses that shield operations and fuel progress and helping clients understand how cyber risks impact revenue.

Doug Clifton

Managing Director, Technology Consulting, Operational Technology Cyber Lead, Americas, Ernst & Young LLP

Aspiring pizzaiolo, avid barbeque enthusiast, experienced scuba diver

Doug is a managing director in Ernst & Young LLP’s National Cybersecurity group, leading cybersecurity initiatives for industrial/operational technology (OT) and Internet of Things segments for EY Americas. He also chairs the global EY OT committee.

Doug began his career in 1990 performing technology delivery and leadership roles. In 2003, he began focusing on building and managing cybersecurity services businesses for critical infrastructures. His extensive experience includes seismic exploration; medical electronics; telecommunications, carrier and enterprise IP network infrastructures; and cellular wireless data backbone systems.

Prior to joining the firm in 2016, Doug was a global director, managing the global cybersecurity consulting practice of a multinational energy management company. Prior to that, he developed and managed the cybersecurity services portfolios at a multinational telecommunications firm.

Doug has over 20 industry certifications in network infrastructure, cybersecurity and compliance, including CISSP, ISO 27001, INFOSEC, CCS1, CCNP, CWNA, CWA, CCNA, MCSE, NNCDS and NNCAS.

How Doug is building a better working world

As a technology consultant, Doug has built, developed and managed three separate cybersecurity services businesses in the industrial automation and critical infrastructure space, executing more than 1,000 cyber defense projects.

To support cybersecurity in continuous operations and process control, Doug has created solutions for many different industries, including oil and gas, manufacturing, nuclear power, fossil power, pulp and paper, chemical, building management, and food and beverage.

Doug focuses on helping his clients understand how cyber risk impacts their revenue and how EY services can make a significant change to their cybersecurity progress. He presents at conferences and meets with many organizations regarding industrial control system security, working with them to build and strengthen their OT cybersecurity safeguards. He understands the availability and safety differences between OT and IT and helps his clients navigate these needs.

Doug's latest thinking

    Contact Doug