Our mission is to help Chief Information Security Officers (CISOs) better understand the priorities of their peers within the C-Suite and to also enable CISOs with tools to communicate business risk, governance, and compliance issues of cloud computing and cybersecurity in the proper context to their peers within the C-Suite and their boards of directors. This initiative will be forward looking and innovative in advancing cloud computing and cybersecurity within the C-Suite. If you're interested in learning more, you can read the press release or email the CSA President, Illena Armstrong, at [email protected].
Latest News for C-Level Executives
Of organizations in the cloud:
47% are concerned
about their staff lacking cloud expertise.
Over 50% are running
41% or more of their workloads in a public cloud.
41% are unsure
whether they have experienced a cloud-related operational incident in the last 12 months.
Source: State of Cloud Security Concerns | CSA
*This survey was submitted to nearly 1900 IT and security
professionals.
Cloud may be the new normal, but numerous organizations:
Are just beginning
their cloud journeys
Have more sophisticated
implementations
Have weaker-than-expected
knowledge of security requirements
Addressing These Challenges
CSA will form a trusted community of CISOs and other C-level stakeholders who will leverage the collective voice of this group to further influence and drive the:
- Evolution and common understanding of cloud and cloud-driven technologies knowledge;
- Establishment and advancement of cloud security standards, guidance, research and more;
- Professional development and continuous education of much-needed cloud experts;
- Improvements in cloud and cybersecurity services and products;
- Progression and passage of related and necessary regulations or legislation;
- Unification of cloud and cybersecurity messaging and knowledge sharing among organizations’ C-suite stakeholders, as well as in the wider industry and beyond.
This group will complement existing CISO and cybersecurity networks. If interested in working with us on ours, which is uniquely positioned given our 12 years as a non-profit helping the industry secure the cloud, please reach out to CSA President Illena Armstrong.
Learn more about CSA CxO Trust.
To gain full access to this group once it’s launched organizations will need to be a CSA Corporate Members. If you're interested in learning more, please email the CSA President, Illena Armstrong, at [email protected].
How to Get Involved
Research Working Group
The CSA CxO Trust Working Group will conduct research consisting of best practices, metrics, surveys, C-level presentations and other tools in support of the overall initiative mission. The working group will be open to professionals and subject-matter experts from both CSA member and non-member organizations. The working group will have its kickoff meeting in Q3 of 2021, interested individuals can informally discuss the issues in our Circle community now.
Along with other projects, this group will regularly update and maintain a document listing the Cloud Priorities for the CxOs. The roadmap of other deliverables for this group will include:
- Original research publications,
- Executive summaries of CSA research publications with context for C-Suite readers,
- Curation of third-party research and data,
- Joint research with outside groups.
Advisory Council
CSA looks to our advisory council to contribute to and advise on the overall strategy and roadmap of this broad-based program’s offerings. In addition to generally advising on the C-Suite Initiative and related offerings, the Council also helps guide our CxO Research Working Group. This council is not only made up of CISOs, but also Chief Information/Chief Technology Officers, Chief Risk Officers, Chief Privacy Officers, Chief Compliance Officers, Chief Operating Officers, Chief Executive Officers and other C-level stakeholders engaged in driving and supporting their organizations’ cloud computing and cloud security programs.
This council is reserved for the participation of C-level executives from our corporate members. If you have any questions you can email the CSA President, Illena Armstrong, at [email protected].
Mike Anderson
Chief Digital and Information Officer
Mike Anderson brings over 20 years of experience to his role as Chief Digital and Information Officer for Netskope, having built and led high-performing teams across a wide range of disciplines, including sales, operations, business development, and information technology. He is considered a thought leader, visionary, and speaker on digital transformation, leadership, and business agility.
Raj Badwar
Field CISO, Oracle
Raj Badhwar has 25+ years of experience in the IT and Cybersecurity industry. He’s had several IT/Security leadership roles in the industry – Currently a Field CISO at Oracle, formerly the Global CISO at Voya Financial, Global Head of Security at AIG, and other IT/Security leadership roles at BAE Systems, Bank of America & AOL Time Warner. He also held a top-secret clearance from the DoD.
Raj is a certified information systems securit...
Rolf Becker
Co-Founder and Chair
Rolf A. Becker is Head Service Control Governance at UBS, globally responsible for Cloud Governance regarding Risk and Control over the UBS Group Cloud adoption and for outsourcing to external cloud-based 3rd party services. Previous roles have been the management of the Cyber and Information Security Portfolio reporting to the UBS CISO at a global level, and the management of the Client Data Confidentiality Program Unstructured Data Protec...
Rachel Bierner
SVP, Cloud Security Leader
Rachel Kim Bierner serves as Cloud Security Leader at Wells Fargo, where she is responsible for the development and delivery of the company’s cloud security strategy and control framework. Prior to joining Wells Fargo, she led various cybersecurity and technology functions over 19 years at Bank of America. Rachel started her career as a consultant with Management implementations for clients around the world.
Fred Budd
Vice President, Cloud Security
Fred Budd is serving as Vice President, Cloud Security for Mastercard. In this role, he is responsible for the protection of Mastercard’s cloud platforms and driving the evolution of security practices. Fred has over 20 years of diverse experience in security architecture, technology strategy and governance, privacy and compliance, identity management, telecommunications, IT operations, and product innovation. In the past decade, he has foc...
Alicja Cade
Director, Office of the CISO, Financial Services at Google Cloud
Alicja Cade, Director, Office of the Chief Information Security Officer (OCISO), Google Cloud, is responsible for shaping cloud security and compliance approaches for financial sector institutions and partnering with GCP clients throughout their security transformation.
Prior to Google Cloud, Alicja was CISO Americas and Global Head of Data Confidentiality Operations at UBS and was CISO for Investment Banking, Group Functions and Amer...
James Cairns
Security Lead
James Cairns loves the evolving challenges of his career in IT Security. He has spent more than 15 years invested in growing his experience as he implements systems and designs solutions to help students and colleagues learn and work more effectively and efficiently. As Security Lead, Bow Valley College, he has been invited to local and national conversations with CANARIE Joint Security Project, CanSSOC, Cybera AB Secure IT, and most recent...
Peter Campbell
Senior Director Cloud Strategy and Engineering
Cloud Security Engineering leader responsible for security engineering and security innovation. Enables new and untried technologies, runs proof of concepts, designs and engineers security configurations and enables the business to leverage new technology safely. Led the creation of Cigna’s security assurance framework which ensures that the security vision is consistently executed. Current research focuses on the domains of sec...
Ben Carr
Chief Information Security Officer
Ben Carr is the Chief Information Security Officer at Cradlepoint. He is an information security and risk executive with more than 25 years of experience in developing and executing long-term security strategies. Ben has demonstrated global leadership and experience, through executive leadership roles of advanced technology, high risk, and rapid-growth initiatives, at companies such as Qualys, Aristocrat, Tenable, Visa and Nokia. While at A...
Sean Catlett
Chief Security Officer
Sean Catlett is the Chief Security Officer at Slack, where he oversees product security, GRC, and security engineering and operations. Prior to Slack, Sean was the first CISO for Reddit, where he built the company’s dedicated Security and Privacy functions, protecting more than 430 million monthly active users around the world. In addition to executive roles at industry-leading security software companies, Sean has held senior leadership ro...
Jerry Cochran
CISO
Jerry Cochran serves as Pacific Northwest National Laboratory’s (PNNL) Chief Information Security Officer (CISO) and is the Technical Operations and Cybersecurity Division Director. Jerry also leads a 5-year R&D program RD2C
Dave Cullinane
TruSTAR Founder and CSA Chairman
Dave Cullinane is the Founder of TruSTAR Technology. Prior to TruSTAR, Dave served for 5+ years as the Chief Information Security Officer and VP of Global Fraud, Risk and Security for eBay and its many global businesses (StubHub, InternetAuction.co, GSI Commerce). He has more than 30 years of professional security experience building and managing cyber security and incident response teams.
Dave is also the past President and Chair...
Rick Doten
VP, Information Security and CISO
Rick is VP, Information Security at Centene Corporation, and CISO of Carolina Complete Health based in Charlotte, NC. Rick supports both the NC health plan and corporate Centene in a cybersecurity leadership role.
In his prior role, Rick worked as Virtual CISO supporting international companies. Rick also developed the curriculum for a Cybersecurity Master’s degree program for an International University.
Rick is an avid speak...
Ian Farquhar
Field Chief Technology Officer (Global)
Ian Farquhar has worked in information security for over 30 years. Previous employers have included RSA/EMC, Cisco, Sun MicroSystems, Silicon Graphics/Cray Research, and Macquarie University. In his role as Global Field CTO for Gigamon, he is responsible for the tactical and strategic planning around information security, especially in the areas of zero trust architecture, high performance cryptography, and advanced threat detection. He has...
Patrick Foxhoven
Chief Information Officer & VP of Emerging Technologies
Patrick Foxhoven is an experienced and innovative managed security entrepreneur and technologist, having spent 20 years building secure and scalable Internet-enabled networks while co-authoring three books on information security and receiving multiple patents. He is currently Chief Information Officer & Vice President of Emerging Technologies at Zscaler.
Prior to joining Zscaler in 2010, he was a founder and CIO of CentraComm, a leading...
Stacey Halota
Vice President–Information Security and Privacy
Stacey Halota joined Graham Holdings Company (then The Washington Post Company) in 2003, where she leads the development and implementation of information security and privacy programs, including Sarbanes Oxley, privacy law, Payment Card Industry compliance, and other data protection efforts. Ms. Halota has more than 25 years of experience in the information technology, security, and privacy field. She is a Certified Information Systems Sec...
Ravi Ithal
CTO
Ravi Ithal is the co-founder and CTO of Normalyze. He has an extensive background in enterprise and cloud security. Before Normalyze, Ravi was the co-founder and chief architect of Netskope, a leading provider of cloud-native solutions to businesses for data protection and defense against threats in the cloud. Prior to Netskope, Ravi was one of the founding engineers of Palo Alto Networks (NASDAQ: PANW). Prior to his time at Pal...
Suyesh Karki
Chief Information Security Officer & VP of IT
With over 16 years of cybersecurity and risk leadership, strategy, and management experience, Suyesh is responsible for leading Domo’s cloud security, risk, compliance, and security operations. At Domo, Suyesh led Domo through the security and compliance maturity curve, including creating a catalog of security controls, implementing a data classification model, deploying a GRC solution, establishing meaningful security metrics, and creating...
Anil Karmel
Co-founder and CEO, RegScale
Anil Karmel is the Co-Founder and CEO of RegScale, which helps organizations start and stay compliant via the world's first real-time GRC platform. Formerly, Anil served as the National Nuclear Security Administration's (NNSA) Deputy Chief Technology Officer. Karmel began his government career as a Technical Staff Member of Los Alamos National Laboratory (LANL) and was responsible for inventing their cloud and collaboration technologies Kar...
Ricardo Lafosse
Chief Information Security Officer
Ricardo Lafosse is the Chief Information Security Officer (CISO) for Kraft Heinz. Lafosse is responsible for IT risk governance, OT security, incident management, technical disaster recovery, and determining enterprise-wide security policies and procedures. Lafosse regularly presents on security topics at global conferences, including MirCon, ISACA CACS, and Secure World.
V.Jay LaRosa
Head of Global Trust Assurance
As the Head of The Global Trust Assurance organization for TikTok, V.Jay leads the team responsible for the development, alignment, adoption, and efficacy validation of the global cybersecurity & risk control capabilities, aligned to a real-time threat & risk compliance measurement framework in support of our world-class organization, infrastructure, and product delivery platforms across the globe.
Fausto Lendeborg
CEO, Secberus
Fausto has 12+ years of experience in cybersecurity and two cybersecurity patents. Before founding and becoming CEO at Secberus, he co-founded and was SVP of security at Zenedge. The knowledge, passion and expertise that led him to co-found two startups began as employee 14 at Prolexic, later acquired by Akamai. Fausto is a cybersecurity expert who has an excitement for helping CISOs and Information security leaders understand how to take b...
Adrian Ludwig
Chief Trust Officer
Adrian Ludwig is the Chief Trust Officer at Atlassian. Adrian joined the company in May 2018 and served as the Chief Information Security Officer for three years. Prior to Atlassian, Adrian held a number of security leadership positions at leading technology companies, including building out the security capabilities at Nest, Macromedia, Adobe, and Android (Google). He is also an active cybersecurity advisor and angel investor. As a self-de...
Ami Luttwak
Chief Technology Officer, Head of Wiz Research, & Co-Founder
Ami Luttwak is Chief Technology Officer and co-founder of Wiz, where he leads the world-renowned Wiz Research team. This team is responsible for identifying some of the year’s biggest novel cloud vulnerabilities, including the OMIGOD, Chaos DB, and Amazon and Google DNS-as-a-Service vulnerabilities.
Previously, Ami was the CTO of Adallom, a leading Cloud Access Security Broker (CASB), prior to its acquisition by Microsoft i...
Kavitha Mariappan
EVP, Customer Experience and Transformation, Zscaler
Kavitha Mariappan is a seasoned go-to-market executive with a penchant for rapidly translating technology into customer-centric value, mobilizing global teams and operations, and transforming them into high-growth businesses. Over her 20+ year tenure spanning enterprise software and service provider, she has held various high-impact roles spanning marketing, product management, and engineering at industry-leading companies, including Databr...
Paul Martini
CEO
Paul Martini holds over 230 patents in cloud cybersecurity and is a trusted expert on Zero Trust, a modern cybersecurity architecture designed to prevent ransomware, breaches and data loss by making all applications private. Paul has been recognized for his leadership and innovation, receiving the Ernst and Young Entrepreneur of the Year award and being named one of Goldman Sachs' 100 Most Intriguing Entrepreneurs. Paul has also been publis...
Aaron Miller
Chief Information Security Officer
Aaron Miller has over 18 years of IT and IT Security experience. He is currently the Chief Information Security Officer for the New York State Office of the Attorney General. Prior to joining the NYS Office of the Attorney General, Aaron was the IT Security Practice Manager with JC Jones & Associates, where he developed IT security policies and procedures for various organizations. Before joining JC Jones & Associates, Aaron was Lead Cyber ...
Todd Moore
Global Vice President of Data Encryption Products
Todd Moore is the Global Vice President of Data Encryption Products at Thales. He is responsible for setting the business line and go to market strategies for an industry leading cybersecurity business. He routinely helps enterprises build solutions for a wide range of complex data security problems and use cases. Todd holds several management and technical degrees from the University of Virginia, Rochester Institute of Technology, Cornell ...
Carlos Moran
VP, Chief Information Security Officer
Carlos Moran is a well-respected and innovative operations risk executive leader that has focused his career on Information Security. He has successfully led and established domestic and international security teams and practices for Financial, Banking, Manufacturing, IT,Development, Telecommunications, and Aerospace industries. Carlos was one of the founders of the successful and expanding CSA Minnesota (MN)Chapter, serving as first Presid...
Oliver Newberry
Chief Information Security Officer and Deputy Chief Security Officer
As the Global CISO for Barclays, I am responsible for establishing and maintaining the enterprise vision, strategy, program and operations to ensure information assets and technologies are adequately protected across Barclays Group. Additionally as the deputy CSO, I support continuous development of an integrated approach to effectively manage a wide range of risks facing the bank.
My vision is to ensure Barclays has a truly world class ...
John Noltensmeyer
Chief Technology Officer
John is a privacy and data security professional with over 20 years of experience in information technology. At TokenEx, a cloud-based data security platform, John has responsibility for helping a global client base meet their data protection and compliance obligations, while optimizing business processes.
Prior to joining TokenEx, John’s career spanned both the financial services sector and federal government. While at BAE Systems, h...
Gerald Parham
Global Research Leader, Security & CIO
Gerald leads the Security and CIO research portfolios within the IBM Institute for Business Value. He advises senior executives and board members on security strategy and cyber value chains, in particular the relationship between strategy, risk, security operations, identity, privacy, and trust. Over the past year, Gerald has authored original research papers on cloud security, cyber risk, business resilience, and zero trust. He has more th...
Vinay Patel
Chief Information Security Officer
As Finastra’s CISO, Vinay is responsible for establishing an intelligence-led, threat-focused information security program capable of detecting and protecting against emerging cyberattacks targeting Finastra and/or its clients.
Edgar Pimenta
VP of Information Security
Edgar Pimenta is the VP for Information Security at Talkdesk (a Cloud Contact Center) and is responsible for the governance, risk and compliance of information security at Talkdesk. He manages the team that deals with policies, the security education program, the security risk management processes, and data protection among others.
Mindy Player
Director of Cloud Security
Mindy Player is the Director of Cloud Security for Lloyds Banking Group. She has 32 years of work experience, with the last 20 being in cybersecurity. Mindy has led teams accountable for various security disciplines ranging from Identity and Access Management, Investigations and Threat and Vulnerability Management to Security Engineering and Design. More recently, Mindy has been operating in cloud security in the Private Cloud, Adopted Publ...
Janice Reese
CEO
Network PDF Cloud Solutions - CEO
Global Marketing Technologist, Healthcare Leader, Advisor, Board Member, BPM+ Health Ambassador, WiCyS TN affiliate V.P. - Nashville Beach Co-Founder
Janice Reese has more than 25 years of technology leadership experience with a specific emphasis on the intersection of information security and business. Janice brings her unique consulting expertise to connect digital transformation to business ...
Dr. Gordon W Romney
CISO and HIPAA Security Officer
Dr. Gordon W. Romney, CISO and HIPAA Security Officer at eVisit Inc., is a computer scientist and Certified Ethical Hacker who helped establish the San Diego region as the Cyber Harbor of the world. eVisit was designated the Forrester Wave 2021 Solo Leader in Virtual Care. His passion is simplifying processes. He joined eVisit following his tenure as Professor and Director of the Center for CyberSecurity Engineering and Technolo...
Russell Rowe
CISO
Russell Rowe is the CISO for MicroFocus - Vertica. He is responsible for the secure deployment of cloud systems and driving security best practices. He is an information security, privacy, compliance, and risk executive with more than 30 years of experience in developing and executing long-term security strategies. Russell has held senior leadership roles in multiple organizations. He is a hands-on technology executive wi...
Marisa Ruffolo
Cybersecurity Strategist and Distinguished Engineer
Marisa Ruffolo is a Cybersecurity R&D Specialist and Distinguished Engineer at Chevron. She is responsible for researching and evaluating advanced technologies to implement Chevron’s cybersecurity guardrails. Prior to joining Chevron, Marisa worked as a systems engineer for national security research programs at Sandia National Laboratories and a technology architect at Accenture.
Lena Smart
Chief Information Security Officer, MongoDB
Lena joined MongoDB with more than 20 years of cybersecurity experience. Before joining MongoDB, she was the Global Chief Information Security Officer for the international fintech company, Tradeweb, where she was responsible for all aspects of cybersecurity. She also served as CIO and Chief Security Officer for the New York Power Authority, the largest state power organization in the country. Lena is a founding member of Cybersecurity at M...
Bernard Tan
Director for Government Cybersecurity Consulting at GovTech
Bernard is a Director in GovTech leading the GovTech Cybersecurity consultancy team to provide risk based consultancy services to architect the cybersecurity of Nationwide and Governmentwide strategic projects.
Through his 16 years in the public sector, he has undertaken various cybersecurity roles and projects in areas of Homeland security. He held key roles such as Chief Information Security Officer (CISO) and Head of Information se...
Neil Thacker
EMEA CISO
Neil Thacker is EMEA CISO for Netskope. He holds over 20 years of experience in the information security industry with previous roles at Swiss Re, Deutsche Bank and Camelot Group. He is co-founder and board member to the Security Advisor Alliance (SAA), with the goal to advocate, mentor and support the next generation of cybersecurity professionals. He is also advisory board member to NeuroCyber, a working group to support neurodiversity in...
Brad Thies
Founder and President at BARR Advisory
As Founder and President of BARR Advisory, Brad Thies leads all aspects of the organization’s global client service delivery and security assessment services including SOC, ISO, PCI, NIST, HITRUST and HIPAA examinations, and cybersecurity consulting services. Under Brad’s leadership, BARR has become one of the most sought-after third-party assessors and consulting providers in the cloud computing space—serving high-growth startups to Fortun...
.jpg/)
Marsha Wilson
CEO
Marsha Wilson is the CEO and Co-founder of ScaleSec, a SDVOSB and security-first cloud consultancy advising clients who run regulated workloads in AWS, Google Cloud, and Azure. Her career has afforded her great opportunities to support clients in the Department of Defense, Energy Sector, Healthcare, and more recently, clients looking to optimize and secure their cloud environment. Marsha is married to her co-founder, Aaron, and they have th...
Joe Zacharias
Deputy CISO for Cybersecurity Risk Management
Joe Zacharias is the Deputy CISO for Cybersecurity Risk Management at Caterpillar in Peoria, IL. He began his career at Caterpillar in 2012 as an Incident Response Manager working in the CSIRT within Enterprise Security, leading large-scale advanced threat response, containment, and remediation activities. His principal areas of security leadership practice currently include Caterpillar Connected Asset Security (IoT) for Caterpillar equipme...
Erkang Zheng
CEO
I envision a world where decisions are made on facts, not fear; teams are fulfilled, not frustrated; breaches are improbable, not inevitable. Security is a basic right. I am a cybersecurity practitioner and founder with 20+ years across IAM, pen testing, IR, data, app, and cloud security. An engineer by trade, an entrepreneur at heart, I am passionate about technology and solving real-world challenges. Former CISO, security leader at IBM an...
Related Resources
Event Recordings
Watch recordings from interviews with CISOs and c-level execs as they share their experience securing the cloud.
Watch Recording
Resources
Access the content created by the CxO Working Group and CSA, from papers to blogs, to videos and more.
View Resources