Graham Costa is a Security Architect and Certifications Manager for the Digital Identity and Security (DIS) division of Thales. He has 20 years hands-on experience in supporting the secure development and security certification of a wide range of security products to standards including FIPS 140-2, Common Criteria, PCI-HSM alongside higher assurance government certifications. Graham is a co-editor for ISO/IEC 19790 and ISO/IEC 24759 and is an active member participating in the Cryptographic Module Users Forum. Graham separately participates in a number of European standard groups where he focuses on ongoing developments in the EU product and system certification landscape. Graham has a masters degree in Electronic Engineering and Business Management from Strathclyde University where he specialized in embedded systems design.