Graham Nasby - short biography
Graham Nasby, P.Eng, FS.Eng, PMP, CAP, CISSP, CISM is an industry-recognized leader in the OT (operational technology), SCADA, and industrial automation sector for his efforts in cyber security best practices, standards development, alarm management, and operational efficiency. Through his work with ISA, CSA, ANSI and the IEC, he has co-authored international standards on systems design, cyber security, industrial automation, alarm management, and HMI systems. Graham has multi-industry experience, ranging from technical to project/program management, in the pharmaceutical, water/wastewater, nanotechnology, process, and rail transport industries. His background includes operations, capital projects, construction, program development, and developing long term technology roadmaps. As a technical and thought leader, Graham is a frequent author of industry articles and invited speaker at industry events. Graham currently holds the position of senior manager of OT security architecture for CN, one of the largest Class 1 railroad and logistics companies in North America. Graham also teaches a night course in engineering law and ethics at McMaster University's faculty of engineering. Graham and his wife live in Guelph, Ontario, Canada in a Victorian century home.
Graham Nasby - chatty biography
I grew up in a medium-sized Canadian city called Guelph. Located near the Canada's famous Great Lakes in the province of Ontario, it meant a childhood that was full of outdoor activities and trips. Summers were spent at the family cottage on a small lake near Lake Nipissing and at a boys' camp in Georgian Bay called Camp Hurontario. As a family, when I was older, we cruised the islands of Georgian Bay on well-worn 31-foot sailboat that was the source of many adventures and stories. It was during these summers that I learned about swimming, canoeing, back country camping, and most importantly, sailing. Childhood sailing experiences included everything from small dinghies to full-sized keel boats that you can sleep on. Though I have to admit I'm not the greatest sailor, I still sail to this day.
After many years of working out of town, I am now very fortunate to be able to both live and work in my hometown. The year 2010 was a year of change for me. It meant switching jobs to find something a little closer to home and taking the leap into home ownership. Since then, I've been a proud owner a 1870s red brick Victorian-era house in downtown Guelph. The work to fix up the place, and breathe some life into its many gardens is a seemingly never-ending process. Who knew that home ownership would be so much work!
Over the years I've worked in a number of jobs. When I was a teenager, I ran a small business installing electrical systems in boats. Then I was off to university, where I worked in their IT department for 8 years while doing a part-time engineering degree. That is when I was not helping people renovate houses or creating websites for additional spending money.
In 2004 with my engineering degree in hand, I somehow graduated into a terrible job market. While we used to have recruiters regularly come to campus when I started my degree, few companies were hiring in the mid 2000's. So instead, I started a small software development company and did programming for hire: websites, databases, php/python, C/C++, microcontrollers, etc.. It paid the bills.
After about a year - and after talking to a lot of people - I landed a job at a structural engineering firm (RWDI) where I learned how to do wind loading calculations for buildings. My programming skills came in handy, as part of my job was the automate a lot of the calculations using very large datasets. I spent about a year at RWDI before getting head-hunted, because I knew a (relatively obscure) controls systems programming language from a course I had taken. My next job was a control systems specialist at a firm that designed high vacuum, evaporative coating machines, ion-beam mills, and space simulation chambers. I got to play 'mad scientist' with them for about year, until there was slow-down in the high-vacuum-industry (yes, that is a term).
I then picked up some spot work in various industries. One of these was designing SCADA (supervisory control and data acquisition) systems for the ready-mix concrete industry. Interesting stuff, but it was not steady work, so I needed to find something a little more permanent.
During the time I had started doing some volunteering with the Ontario Society of Professional Engineers. While at an OSPE event, I met a fellow who owned a pharmaceutical engineering firm, who invited me to come work with him for a few years. I spent 3 years in the pharma industry doing process control design, project management and facilities design - it was a cool job, but there was a lot of paperwork.
In 2010, I made the jump over the municipal water sector. I spent the next five years working for a consulting engineering firm where I did System Integration, PLC/HMI programming, Instrumentation/Control Design, Electrical Design, Project Management, Contract Admin, and a number of other technical roles. I also got to a bit of business development, which was a fun challenge.
After about five years, I felt it was time to go work for a city where I could shape the long term development of a waterworks rather than jumping from project to project. So in the fall of 2015, I joined the City of Guelph as the Water SCADA & Security Specialist in their Water Services Division.
While at the City of Guelph, I looked after automatic control systems that keep the city's waterworks operating. This included the long-term planning of upgrades, supervising improvement work, developing system standards, supervising the SCADA team, and ensuring the operations team had access to the tools they needed to do their jobs efficiently/effectively. I also got to work closely with the capital projects team, to help them coordinate all the SCADA aspects of our numerous facility upgrade projects. It was a fun job.
I ended up spending 6.5 years with the city from 2015 to 2022. During my time there I was able to document the existing system, develop a technology roadmap, create a 25 year capital renewal/investment plan for the SCADA system, and then put the renewal plan in motion. It also go to try out out some new IIoT technology (we built a datalogging system out of raspberry PI microcontroller, MQTT, Node Red, Cassandra, and Unbuntu VMs), use some interesting protocols like DNP3, WITS and JSON/XML, and try out some new ways of doing data analytics.
With the city's conventional SCADA hardware, I also had a chance to develp a set of new programming templates and tools for our PLC hardware and HMI software platforms to effect 75% labour savings for programming work. And then was able to replicate the same savings with standardized PLC Panel designs, motor starter designs and instruemntation wiring/installation standards. It was an fun challenge of how to work to reduce the amount of (expensive) custom design/programming work as much as possible.
My time at the city also give me a chance to give something back to the profession by running at college/university co-op student program, publishing papers, and frequently speaking at conferences. I also got a chance to build the business case for investment in SCADA systems, and grew the utility's annual SCADA Budget from $125K to $1.5 million/year, grew the team from 1 person to 5, and put in place workflows to support two $30million/year large capital projects programs in the water and wastewater divisions. It was busy time but a lot of fun.
In early 2022, I had the good fortune to be head-hunted by CN Rail to take on the role of senior manager of OT security architecture as part of their cybersecurity team. It's a 100% remote (home office) job, so means I get try something new without having to commute. I also get the benefit of joining a well established team that has both a challenging and forward-looking mandate from CN's CISO (chief information security officer) and board. I'm very much looking forward to my new role at CN Rail. Who knows, maybe they may even let me ride on a train (if I'm a good boy).
In addition to my day job, I'm quite active with the International Society of Automation (www.isa.org), of which I have been a member since 2004 and active as a volunteer since 2010. They are a volunteer organization comprised some 36,000 technicians, engineers and facility owners who have common interest in industrial automation. During the past 10 years or so, I've been involved with the local section, technical divisions, standards committees, and in various volunteer leader roles at the international level. It's a great organization.
The year 2011 was exciting year for me as it was the year I presented in my first international conference and also the year I appeared in print for the first time. The May/June 2011 issue of ISA InTech magazine included article on SCADA Standardization that I co-wrote with a friend of mine from the City of Guelph's Water Services department. We also presented a talk on the same project at that year's 2011 ISA water/wastewater and automatic controls symposium in St. Louis, Missouri, USA. In a way it was foreshadowing, as I would later become the volunteer general chair of that symposium in 2012 and 2013. Since then I have been fortunate to have the opportunity to be involved several other conferences and publish a number of technical papers.
Though I finished my engineering degree a long time ago, I do have to admit I still like studying. At present I am slowly working towards a B.A. in history, one course at a time. As a part-time student at the University of Guelph, I try to take one night course year. I think of it as having a weekly documentary where I can ask questions. Working on the arts courses is also a nice break from the engineering work I do during the day. Long term education goals? I'm not sure, but I'm not going to rule out doing a part-time MBA or MSc at some point.
Recently I have been doing some teaching at both the college and university level. In 2017-2018, I was fortunate to be a guest instructor at Fleming College's municipal water operator program (aptly titled: AWSOM - Advanced water Systems Operations & Management). Since then, I've taught hands-on evening classes at Mohawk College and Conestoga College. At the University level, I also now teach an evening course on engineering law and ethics at McMaster University. As 2022, I will have taught my McMaster law/ethics course eight times - I' m not sure why, but I still get nervous before the first class of each semester.
I have been playing musical instruments since I was about five years old. My first instrument was recorder, which I played quite seriously up until I was I was in high school. Not familiar with recorder music from the Baroque Period (1600-1750)? The repertoire is actually quite extensive with many notable composers such as Bach, Handel, Cornelli, Telemann and Vivaldi. Two of my favourites are Cornelli's Concerto in C, and Telemann's Suite in A-minor. At fifteen I made the decision that I did not want to study Baroque/Early Music in university, so I stopped what had been my regime of practicing two hours a day. I don't play much recorder any more, mostly because I can't seem to find the time.
When I was twelve I picked up the clarinet and have been playing ever since. I am pretty much self-taught -- back in Grade 7, I asked school music teacher for a fingering chart and never looked back. While I was in high school I played in the senior band, a jazz band that I directed, and a number of other ensembles. Ever since high school, I have been quite active on the community music scene and have played with various different community bands and orchestras over the years. How much I play depends on how busy work gets, but I usually try to play with at least one group. In addition to playing the usual Bb/A clarinets, I also play several "harmony" clarinets including: Eb clarinet, bass clarinet and contrabass clarinet. I also occasionally noodle around on saxophone, trumpet and bassoon. Though I have to admit, I'm pretty lousy at playing the trumpet.
When I turned 40, my wife decided it was time that I became a "Real Engineer". She arranged for me to be "Engineer for the Day" for the steam train at Muskoka Heritage Park (Huntsville, Ontario, Canada). So, at 40 years old, I finally learned how to drive a steam locomotive. Hence the photo on the right side of this page. Driving a train is (actually) a lot harder than it looks.
I enjoy getting out of the city whenever possible. I still get up to the family cottage and try to travel whenever I can. On the water I still sail dinghies, and next summer I am considering joining a community sailing club that is nearby. Other hobbies include European history, English/French literature, canoeing, mountain biking, going to the opera, and pretending know how to play golf.
Photos: headshot - larger | headshot2 - larger | engineering - larger | process plant - larger | process plant2 - larger | speaking - larger | driving steam train | informal overalls | teaching - larger | formal headshot - larger | UofG mid-career award - larger |