Andrew Cormack has worked for the UK's national research and education network for more than twenty years. He joined as Head of the Computer Emergency Response Team, but for the past fifteen years has focussed on policy and regulatory issues. His role has expanded from networks to technical services such as federated authentication and, more recently, services based on data. Throughout, his aim has been to make law and technology work together, rather than in opposition.

To support this, he has added batchelor's and master's degrees in law to his original mathematics degree. He is a regular speaker at national and international conference, and writes in all formats from blogs to peer-reviewed papers. He chaired the programme committees for the 2009 TERENA Networking Conference and 2019 FIRST Security and Incident Response Conference. In 2015 he was awarded the Vietsch Foundation Medal for his role in advancing trust and security within the European research and education sector.

ORCID https://orcid.org/0000-0002-8448-2881