
Brad A. McGoran, P.E., CSCIP, CSCIP/G, GIAC, ACE-M
Mr. McGoran has been with Exponent since 1995 and has been working in the area of cyber security, smart cards, security, privacy, and identity for over 20 years. Mr. McGoran has particular expertise in the areas of identity management and credentialing, with specific in depth knowledge on smart card technology, e-passports, and other identification credentials, related equipment, and processes. Mr. McGoran is cyber security certified in accordance with Department of Defense directive 8570 at the highest management level, IAM Level III. Mr. McGoran also has significant prior experience with product reliability testing, system failures analyses, product design, materials failures, quality control, and standards conformance. He has performed experimental testing of performance and reliability in support of the DoD CAC program and FIPS201 Approved Products List and led teams performing risk analysis of numerous other products and systems. Mr. McGoran presently leads a team that manages major projects for the Department of Defense, and other agencies and commercial clients concerning contact and contactless smartcards, derived credentials, mobile device security, mobile credentialing, IoT Security, card failure analysis, deployment programs, card related equipment, SIM cards, RFID, electronic passports, and biometrics. The team also advises and assesses conformance with requirements and standards including ISO, ANSI, UL, ASTM, Federal Information Processing Standards (FIPS), DoD, as well as privacy requirements such as General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) considerations. Mr. McGoran has been a principal member of the Secure Technology Alliance, including the Identity and Access Control Councils and was among the first to be qualified as a Certified Smart Card Industry Professional (CSCIP). Mr. McGoran is also an active member of the national and international standards committees related to smart cards and identification credentials. In 2005, Mr. McGoran founded Exponent China, a Hangzhou, China-based subsidiary of Exponent. He served as Exponent China’s General Manager until returning to Exponent’s Menlo Park headquarters in 2008.
CREDENTIALS & PROFESSIONAL HONORS
- M.S., Aeronautical Engineering, Stanford University, 1996
- B.S., Mechanical Engineering, Stanford University, 1995
Henry O. Fuchs Award for Excellence in Design, Stanford University, Department of Mechanical Engineering
Award for Excellence in Engineering Design, American Society for Engineering Education
LICENSES & CERTIFICATIONS
GISF Information Security Fundamentals Certified (GIAC)
Licensed Professional Mechanical Engineer, California, # M31027
DoDD 8570 Cyber Security Certified (GIAC IAM Level III)
Certified Smart Card Industry Professional (CSCIP)
Certified Smart Card Industry Professional for Government (CSCIP/G)
Advanced Card Education (ACE)
GCCC Critical Security Controls Cybersecurity Certification
Certified Cyber Security Architect (CCSA)
LANGUAGES
- French
- Mandarin Chinese
Publications
Mr. McGoran has authored or co-authored a large number of reports addressing reliability, interoperability, and performance of secure credentials and systems, smart cards, identity management and access control systems, processes, and equipment. Copies of non-confidential reports are available upon request. Mr. McGoran also routinely publishes articles or interviews in leading journals covering this technology. He has hosted panels and been a keynote speaker at Secure Technology Alliance Conferences, National and International Conferences such as TrusTech, and agencies and installations such as the Pentagon.
Patents
US Patent No. 7,936,274: Shield for Radio Frequency ID Tag or Contactless Smart Card, issued May 3, 2011 (Shkolnikov Y, Du Y, McGoran B).
Professional Affiliations
Secure Technology Alliance (STA) Member
STA Identity Council Member
STA Access Control Council Member
International Committee for Information Technology Standards (INCITS) Committees:
CS1: Cyber Security Principal Member
B10: Cards and Security Devices for Personal Identification Principal Member
B10.11: Physical Characteristics and Test Methods Principal Member
B10.12: IC-Cards - Circuits, Interfaces and Protocols for Secure Devices Principal Member
B10.8 – Driver’s License/ID Cards Principal Member
ISO/IEC JTC 001/SC 17/AG 02 "Virtual ID and related technologies" Member
ISO/IEC JTC 001/SC 17/WG 01 "Physical characteristics and test methods for ID-cards" Member
ISO/IEC JTC 001/SC 17/WG 03 "Identification cards - Machine readable travel documents" Member
ISO/IEC JTC 001/SC 17/WG 04 "Generic interfaces and protocols for security devices" Member
ISO/IEC JTC 001/SC 17/WG 08 "Integrated circuit cards without contacts" Member
ISO/IEC JTC 001/SC 17/WG 10 "Motor vehicle driver license and related documents" Member
ISO/IEC JTC 001/SC 17/WG 11 "Application of biometrics to cards and personal identification" Member
ISO/IEC JTC 001/SC 27/WG 01 "Information security management systems" Member
ISO/IEC JTC 001/SC 27/WG 02 "Cryptography and security mechanisms" Member
ISO/IEC JTC 001/SC 27/WG 03 "Security evaluation, testing and specification" Member
ISO/IEC JTC 001/SC 27/WG 04 "Security controls and services" Member
ISO/IEC JTC 001/SC 27/WG 05 "Identity management and privacy technologies" MemberAmerican Society of Mechanical Engineer (ASME) Member
American Institute of Aeronautics and Astronautics (AIAA) Member
International Card Manufacturers Association (ICMA) Member
International Association of Privacy Professionals (IAPP) Member
Secure Document Alliance (SDA) Member
Knowledge
News & Events
CREDENTIALS & PROFESSIONAL HONORS
- M.S., Aeronautical Engineering, Stanford University, 1996
- B.S., Mechanical Engineering, Stanford University, 1995
Henry O. Fuchs Award for Excellence in Design, Stanford University, Department of Mechanical Engineering
Award for Excellence in Engineering Design, American Society for Engineering Education
LICENSES & CERTIFICATIONS
GISF Information Security Fundamentals Certified (GIAC)
Licensed Professional Mechanical Engineer, California, # M31027
DoDD 8570 Cyber Security Certified (GIAC IAM Level III)
Certified Smart Card Industry Professional (CSCIP)
Certified Smart Card Industry Professional for Government (CSCIP/G)
Advanced Card Education (ACE)
GCCC Critical Security Controls Cybersecurity Certification
Certified Cyber Security Architect (CCSA)
LANGUAGES
- French
- Mandarin Chinese