David Brown

Background

About David Brown

An Outcome Oriented Lifelong Learner, Dedicated to Responsible Servant Leadership; holding myself and others Accountable using Transparent communications of success and opportunity, values feedback: • Specializes in making Cybersecurity Compliance meaningful to all business areas: Information Technology (IT) Development / Security / and Operations (DevSecOps) as well as Finance, Sales and Legal • While remaining grounded in the core Cybersecurity principles and practices, dives deep into business drivers to understand the problem space before influencing solutions. This requires an understanding of the balance between timely results and organizational change: Balancing Opportunity, Value and Impact in the prioritization of risk-informed decisions • Delivers measures of compliance against impactful cyber security frameworks (notably NIST and FedRAMP); but more importantly, these measures are feedback to service owners creating value similar to what a quality assurance program does manufacturing. Given that objectives are meaningful to a service, measured and managed compliance ensures stability and improves resilience, bringing certainty to the customer Customer Focused- making the Right-Thing Easier and Wrong-Thing Safer; known to Think Big within the agreed to role for each area of engagement; asked to Coach, Mentor, Advise and Influence Security Outcomes towards an ever-Enhanced Enterprise Standard. These engagements involved External Customers as well as Internal Data Center (Network/Server), Chance Control, Private/Public Cloud (IaaS, PaaS, SaaS), Asset Tracking, Service Inventory, and Performance Monitoring Recognized by Carnegie Mellon Software Engineering Institute as the “Architect of the First Public Sector Agile Security Program” Veteran Administration (VA) Veteran Benefit Management System (VBMS) 2010: Federal Registry Entry