Kris Winkler

Background

About Kris Winkler

Cybersecurity leader with 25+ years of experience helping global organizations integrate cyber risk management into enterprise-wide governance and decision-making frameworks. Based in Denver, I help global organizations strengthen their cyber resilience by aligning security strategy with business objectives, regulatory expectations, and emerging threat landscapes. I have a proven track record in security leadership and management across multiple industry and government environments, including healthcare, technology, communications, consumer products, global consulting, legal, financial services and public sector (education, defense, military services and civilian agencies).I am recognized for my technical expertise in cybersecurity frameworks and standards; cyber supply chain/third party risk management; governance, policy and strategy; program management; security maturity assessments; cyber risk management; security process improvement; and cyber culture. I have a deep understanding of National Institute of Standards and Technology (NIST) security frameworks and requirements and co-authored NIST SP 800-161 Rev. 1, Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations in 2021, and NIST IR 8179, Criticality Analysis Process Model: Helping Organizations Decide Which Assets Need to Be Secured First in 2018.