About

The point of an independent adviser is judgement, not a longer supplier list.

I am Agron Fazliu, an independent technology adviser. I have held responsibility across C-level technology leadership, information security and risk, data, systems and decisions about budgets, suppliers and change that connect those disciplines. My work has included confidentiality-sensitive professional environments where technology choices must respect the obligations surrounding the information.

A composite portrait: part of a face set against pale geometric shapes, a
           thin gold arc and a distant coastline

Those responsibilities matter together. A platform can be technically sound and still be wrong for the organisation. A security measure can be correct in isolation and still make an essential process unworkable. A promising AI product can arrive before the records and controls needed to use it responsibly. My work is to bring those views together before a decision is made.

I focus on confidential, long-lived operating environments: particularly fiduciary businesses, family offices and the advisers around private wealth. The important questions are usually practical. Can information be trusted? Is access appropriate? Can a provider be replaced? Can the organisation continue when people or systems change? Will the decision still make sense in two years?

Professional range

The questions I work on cross several technical and executive disciplines.

  • Technology architecture, infrastructure and operations.
  • Information security, identity, governance and risk.
  • Data quality, analytics and practical AI.
  • Technology suppliers, costs, delivery and operating models.
  • Executive decision support and the consequences of complex change.
A small flock of birds against an empty pale sky
Five disciplines, and the same questions keep surfacing in all of them.
How I work

Four habits, held long enough to be sure of them.

I begin with the decision.

A conversation about replacing software is often really about control of information, an expensive dependency or an unclear operating responsibility. Establishing that distinction prevents the wrong programme from starting.

I ask for evidence.

I prefer the actual contract, access model, recovery test, cost picture and workflow to a confident summary. Where evidence is incomplete, I say so.

I do not assume a larger project is better.

Sometimes a focused review is sufficient. Sometimes a decision should be deferred until the organisation is ready. The scope should follow the decision, not the other way around.

I respect professional boundaries.

Lawyers, trustees, accountants, investment advisers and specialist protection providers retain responsibility for their disciplines. Technology advice should make their work more dependable, not pretend to replace it.

A dense flock turning above bare branches at dusk
Still unsettled by the time the current technology has been replaced.
Executive responsibilities

I have led the function, not only advised the people running it.

I have held the Chief Information Officer role, following responsibility for information security and IT risk. Earlier roles included leadership of DevOps, data science and security, and product and technology direction. Across those positions, the work involved the less visible part of executive technology: decisions about people, suppliers, budgets, operations, risk, architecture and delivery.

That is the basis of my fractional CIO and CTO work today. I can join a board or executive conversation without treating it as detached from what engineers and operators will actually have to do afterwards.

Background

Where the formal part comes from.

Education

Executive education, University of Cambridge2020

Business Analytics.

MSc, University College London2005

Data Communication Networks and Distributed Systems.

BA, American University in Bulgaria2003

Computer Science.

Certifications

EU General Data Protection Regulation Foundation2018

European data protection law: what personal information may be collected, kept, and used for what.

Certified SAFe Agilist2018

Coordinating many teams so they deliver towards one outcome rather than ten.

Data Science and Data Engineering Bootcamp2017

Building the pipelines that make data usable, and the models that learn from it.

PRINCE2 Foundation2016

A structured method for running projects, common in government and regulated work.

DevOps Foundation2015

Shipping software changes often, without breaking what is already running.

Certified Scrum Product Owner2014

Deciding what a product team builds next, and why that before the rest.

ISO/IEC 27001 Information Security Management Systems and Internal Auditing2011

The international standard for managing information security, and how to audit an organisation against it.

Novell Certified Linux Administrator2010

Running Linux servers, the operating system most of the internet sits on.

Certified Ethical Hacker2008

Finding the gaps in a system by testing it the way an attacker would.

LPIC-1 Linux Administrator2008

The same ground, certified independently of any one vendor.

Recognition

Nominum Prize, University College London2004

A team award for the master's group project, built with one of Europe's largest internet exchanges. Exchanges had each been building monitoring toolkits fitted to their own infrastructure, so none could use another's. Instrumenting a network at that scale without disturbing what is being measured turned out to be the interesting half.

The group report

Chevening Scholar and alumnus2003

The UK government's international scholarship programme, funded by the Foreign, Commonwealth and Development Office.

Published and presented

Eighteen published pieces2013 to 2026

On AI, machine learning, how organisations really work, and why data misleads people who trust it.

Read the writing

Study commissioned by the U.S. Department of Defense2020

My 2018 work on organisational network analysis was cited in an Institute for Defense Analyses study examining AI in defence acquisition.

The study

A European internet operators' conference2011

On building a national internet exchange.

The presentation

Begin with the question.

If you are considering a consequential technology decision, begin with the question. We can establish whether my contribution would be useful before discussing sensitive detail.

Follow up on LinkedIn