Meet the experts

Rob Black, CISSP

CEO & Founder of Fractional CISO LLC.

Rob founded Fractional CISO in 2017 and has helped dozens of companies improve their security posture as a Virtual CISO. Rob has held product security and corporate security leadership positions at PTC ThingWorx, Axeda and RSA Security. He consults, speaks, and writes on IoT and security.

Roundtables with Rob:

Roundtable with Rob

SOC2 InfoSec Platforms

Marketing vCISO

Francesco Cipollone

CEO & Founder of Phoenix Security

Francesco is a seasoned entrepreneur, CEO of the Contextual-based vulnerability management platform from code to cloud Phoenix Security, author of several books, host of multi-award Cyber Security & Cloud Podcast, speaker and known in the cybersecurity industry and recognized for his visionary views. He currently serves as Chapter Chair UK&I of the Cloud Security Alliance. Previously, Francesco headed HSBC's application and cloud security and was Senior Security Consultant at AWS. Francesco has been keynoting at global conferences and has authored and co-authored several books. Outside of work, you can find him running marathons, snowboarding on the Italian slopes, and enjoying single malt whiskeys in one of his favorite London clubs.

Phoenix Security

Roundtables with Francesco:

Application Security Vulnerability Frameworks with Francesco

Tim Golden

Founder Compliancerisk.io 

Tim is the founder of Compliancerisk.io, a company that focuses on empowering the compliance function within your MSP by streamlining your compliance operations. Tim is a seasoned professional in the governance risk and compliance space, with over 20 years of experience helping organizations tackle their business problems with the help of people, process, policy, and technology. He is an expert in compliance, risk management, governance policy management, and cybersecurity, and provides training, consulting, and technical assistance and governance programs to Managed Service Providers (MSPs). As a U.S. Army veteran, Tim knows what it takes to lead high-performing teams and he brings that same level of discipline and expertise to his work at compliancerisk.io. Throughout his career, he has demonstrated his ability to navigate complex regulatory environments, understand emerging trends, and develop innovative solutions that help companies stay ahead of the curve. Tim is also a gifted communicator and educator, able to demystify even the most arcane concepts and facilitate solutions that work for everyone involved. His approach is grounded in a deep understanding of the human side of compliance, and he has a talent for building strong relationships with clients and stakeholders.

Compliancerisk.io

Roundtables with Tim:
Cybersecurity Policy Governance

Policy Program Management

J. Wolfgang Goerlich

J. Wolfgang Goerlich is an Advisory CISO. Prior to this role, he led IT and IT security in the healthcare and financial services verticals. Wolfgang has held VP positions at several consulting firms, leading security advisory and assessment practices. He is an active part of the security community. Wolfgang regularly advises on the topics of security leadership, architecture, and design.

Roundtable with Wolfgang Goerlich

Brian Haugli

CEO, SideChannel

Brian has been driving security programs for two decades and brings a true practitioner’s approach to the industry. He creates a more realistic way to address information security and data protection issues for organizations. He has led programs for the DoD, Pentagon, Intelligence Community, Fortune 500, and many others. Brian is a renowned speaker and expert on NIST guidance, threat intelligence implementations, and strategic organizational initiatives.

Brian is the contributing author for the latest book from Wiley, “Cybersecurity Risk Management: Mastering the Fundamentals Using the NIST Cybersecurity Framework“.

Lastly, he is a professor at Boston College, in the Woods College of Advancing Studies, Master’s Program in Cybersecurity.

Roundtables with Brian:

My Company from Start to Sale

Laura Louthan

Founder Angel Cybersecurity

Laura is a cybersecurity and information technology leader with extensive experience in global security operations. With a breadth of technical and leadership skills, Laura’s background includes diverse responsibility for establishing and directing security and compliance programs, overseeing risk management, and advancing technology architecture in retail and financial industry sectors. She started her own consulting company, Angel Cybersecurity, in 2017 which provides cybersecurity risk management, implementation and strategic support as well as compliance help for small and medium enterprises, mostly in a vCISO role. Laura also helps larger organizations that have security teams but may need focused help in other areas, such as with PCI and ISO 27001.

Laura’s prior roles include serving as Head of Information Security for a large international retailer, with more than 400 stores in 4 countries and a large ecommerce site. Laura was responsible for aligning security initiatives with enterprise programs across the United States, Canada, Mexico and Brazil. Prior to that she was Senior Director, Global Security Compliance for Equifax, having previously spent 15 years in IT as a hands-on professional. Recognized as a solution-oriented leader, Laura embraces a collaborative management approach to work across platforms to deliver IT security and compliance solutions that ensure the protection of information assets and technologies. Laura’s functional expertise extends to governance, security risk assessment and operational execution, security awareness programs, and enterprise policy and standards development.
Laura is a graduate of Oxford University in England where she earned a degree in Biochemistry, and her security certifications include CISSP, CISM, CISA, CCSP, CCSK and PCIP.

Angel Cybersecurity 

Roundtables with Laura:

PCI 4.0 update with Laura Louthan

Caroline McCaffery

Founder & CEO of ClearOPS

Caroline is an attorney with over 22 years of experience in startups, corporate, commercial, M&A, securities, data privacy and cybersecurity. She currently spends most of her time on her own startup, ClearOPS, while also continuing to represent a few clients to keep her market perspective sharp. Before starting ClearOPS, which stands for Clear Operations in Privacy and Security, she was the General Counsel at an AI startup called Clarifai, and before that, General Counsel at Sailthru. It was Sailthru that inspired Caroline to seek a professional certification in privacy and sparked her interest in cybersecurity, particularly from the operations side of the business.

Back in 2012, Caroline was introduced to her first security questionnaire. It took her over 6 months to complete it due to its length, complexity and the fact that the answers were scattered around the organization. Having experienced multiple financings and M&A deals requiring due diligence, Caroline was shocked at the amount of time it took to complete privacy and cybersecurity due diligence. But it wasn’t until she was the victim of tax fraud in 2015, when the IRS agent told her that her information had been stolen due to an undisclosed breach at her company’s payroll provider, that she swore to help others. Since then, her mission has been to fix the internal disorganization and to improve company security. She found mission alignment with vCISOs and has been working with them ever since. She currently hosts a podcast called The vCISO Chronicles, in addition to working at ClearOPS.

ClearOPS.io

ClearOPS SubStack

Roundtables with Caroline:

ClearOPS vCISO Management Software with Caroline McCaffery