CISO Perspectives to Improve/Optimize Vulnerability Management
Vulnerability management remains an uphill challenge for security teams. In this month of CISO Stories, we look at the findings of a cross-sector task force of CISOs and staff who shared their challenges and best practices for developing effective vulnerability management practices. Topics include:
- Managing vulnerabilities on premises, in the cloud, and in third-party environments
- Identification, classification, prioritization, and remediation best practices
- Standards and charters
- Organizational structures
- Scanning tools.
Supporting tools to be shared include a CISO’s Guide to Effective Vulnerabilities; and a Vulnerability Management Maturity Checklist.
Practitioners will also connect the dots on how effective vulnerability management can be used to continuously improve identity, application, cloud and network security, anti-ransomware efforts, zero trust, email security, threat intelligence, AI and third-party risk management.
Speakers
Brad Skrbec, Sr Manager, Vulnerability Management, Motorola, a Lenovo Company
Brad Skrbec boasts an impressive career spanning over 36 years at Motorola/Lenovo, where he has continuously evolved his role to meet the demands of the ever-changing technological landscape. With humble beginnings as a software engineer, Brad’s journey has led him to become a cybersecurity veteran, amassing over two decades of expertise in the field.
Currently serving as the head of Vulnerability Management, Brad leads a crucial charge in fortifying Motorola/Lenovo’s cybersecurity posture. His strategic oversight of infrastructure vulnerability is pivotal in safeguarding the organization’s digital assets from modern threats.
Matthew Stiak is a customer focused cyber risk management leader who helps businesses realize differentiated outcomes through innovative security strategy and its implementation. His proven track record spans two decades of work at Fortune 100 health care and financial services firms. Consistently recognized for his aptitude in connecting and unifying diverse viewpoints, he develops highly effective teams and establishes impactful relationships across personal and professional boundaries. His value measurement methodologies and service oriented approach empower security organizations to achieve strategic and operational excellence.
For over 20 years, Tom has practiced as a cyber security professional as an executive director of information security for Verizon, a founder of two cyber security consulting firms, and Vice President of Content and Programs for the Cybersecurity Collaborative.
Tom is CEO of MyDataOnly, Inc., which offers privacy and security consultation and security (penetration) testing services. Tom began his career in IT in programming and strategic planning and later founded a customer satisfaction measurement firm.
Tom holds four security certifications (CISSP, CISM, PCIP) and one privacy certification (CIPP/US). He has a master’s degree from MIT’s Sloan School of Management and is a Marine Corps veteran.
Dr. Dustin Sachs is the Chief Technologist and Sr. Director of Programs at CyberRisk Collaborative. He is a highly accomplished cybersecurity professional with a proven track record in risk management, compliance, incident response, and threat mitigation. He is CISSP-certified and holds a Doctor of Computer Science (DCS) degree in Cybersecurity and Information Assurance. Dr. Sachs has worked in various industries, including public utilities, food distribution, and oil and gas. He is a respected thought leader in the cybersecurity community.
Parham Eftekhari is a business executive specializing in cyber and national security. He currently serves as Executive Vice President, CISO Communities at CyberRisk Alliance, leading its CISO services platform which consists of the Cybersecurity Collaborative and Cybersecurity Collaboration Forum. Parham also serves as the chairman of the Institute for Critical Infrastructure Technology (ICIT), the nation’s leading cybersecurity think tank, which he founded in 2014. Other leadership roles during his more than 15 years in this sector include co-founder and Vice President of research at the Government Technology Research Alliance, founder of the world’s first webcam cover manufacturer CamPatch, and Advisory Board member at the Ready Rock Institute. Parham has developed and authored multiple research publications, regularly engages with the media, and has addressed forums ranging from Congress, TED, RSA, and C-SPAN. In 2017, Parham was recognized by (ISC)2 for his contributions to the field of cybersecurity with the Most Valuable Industry Partner – Government Information Security Leadership Award.