Issue 12  October 3rd 2021

David Lafond - Principal in the Practice of Cybersecurity and Privacy Strategy - LaFond Consulting

David Lafond is a principal in the practice of cybersecurity and privacy strategy at LAFOND CONSULTING. He has more than 20 years of experience developing and managing complex infrastructure in highly regulated industries on the protection, operation, and compliance of their networks, systems, applications, data, devices, people, and property. His competencies as an industry expert include cybersecurity risk management, policies and procedures, legal and regulatory compliance, Software Development Lifecycle (SDL) security, big data, incident response and digital forensics, secure cloud strategy, security education, secure mobile computing and vendor governance. Mr Lafond's previous roles include CISO, CTO, and Head of Technical Operations and Infrastructure for organizations like Amazon, Etsy, Dow Jones & Co, Marsh, and Collective Intelligence. Mr Lafond is a graduate of the United States Merchant Marine Academy where he majored in Marine Engineering Systems with a minor in Nuclear Engineering and served in the Navy Reserve for 11 years. He is certified as a CISSP, a registered professional with the CMMC, and a member of IAPP. He holds a Masters in Computer Engineering, an MBA, and is currently pursuing a Doctorate in Strategic Leadership.

linkedin.com  

Jim Ambrosini - Virtual Chief Information Security (vCISO) - Infinite Group, Inc.

Jim Ambrosini is a Cybersecurity Consultant with over 25 years of diversified experience. He is currently with the Infinite Group, Inc. (IGI) where he specializes in delivering virtual Chief Information Security (vCISO) services to numerous clients across industries. Prior to joining IGI, Jim was a Director at Wells Fargo where he led both the Consumer Technology Risk Division, and then Business Risk & Controls for Digital Banking. Before that role, Jim served as a Managing Director at a top 10 accounting and consulting firm where he led a national cybersecurity consulting practice.

Jim has taught graduate level courses on Information Risk as an adjunct professor at NYU, and has also been extensively involved with professional organizations, such as ISACA, where he was the NY Chapter past president and is currently on the strategic advisory committee. Jim earned a BA in Journalism and Communications from Washington & Lee University and then a Masters degree in Management of Information Systems from Stevens Institute of Technology.

linkedin.com  

Debra Price - Security Product Management and Marketing Professional - Radware

Debra Price is a Security product management and marketing professional. She began her 20+ year security career at AT&T launching and managing services including threat management, web security, encryption and IoT security and now works at Radware managing its reference and vertical solutions marketing programs.

She earned her BA in Psychology from Douglass College and MS in Industrial Relations/Human Resources from Rutgers University. She obtained her Certified Information Systems Security Professional (CISSP) certification in June 2004 (Member ID 58719) through the International Information Systems Security Certification Consortium (ISC)². Debra shares her security knowledge through the (ISC)² Safe and Secure On-Line program by giving talks to adults and children about proper Internet use.

Debra enjoys traveling and diving; she maintains a website of diving and travel videos at myunderwatervideo.com. When she can’t be under water, Debra enjoys daily workouts of swimming, running or yoga, dancing, hiking, and gardening or relaxing on the beach with a good book.

linkedin.com  

Bernardo M. Vasquez - Advisory CISO - Palto Alto Networks

Bernardo Vasquez is an experienced Cybersecurity, Risk, and Privacy Leader who serves as Advisory CISO, supporting Palo Alto Networks' largest strategic clients; he's been in the trenches and the boardroom and relates to the challenges and opportunities IT and Business leaders face daily.

Before joining Palo Alto Networks, Bernardo was CISO and VP of IT at Hudson, a Dufry Company, leading multiple transformations for the business by using Security, Privacy, Risk, Compliance, and Agile Program Management to facilitate business growth plus scale operational efficiencies.

Additionally, Bernardo has served as NYU's first global CISO. While at Deloitte's Enterprise Risk Services practice, he led management, operational and technical engagements across retail, hospitality, pharmaceutical, financial services, and consumer product industries.

He holds multiple certifications and deep experience in various domains, including CISSP, CIPM, CRISC, CCSP, CCISO, and is a former Hacking Forensics professional.

linkedin.com  

Tran Cheung - Principal of IT Security, Risk and Compliance - Mathematica

Tran Cheung is a Principal of IT Security, Risk and Compliance at Mathematica. She’s an expert in IT security and compliance and serves as the security subject matter expert on the development of security policies and procedures for client projects and corporate initiatives. She has over 20 years of IT experience and over 13 years of immersive cybersecurity experience in the assessment of complex government Information Technology (IT) systems. She has deep knowledge of the Risk Management Framework and the applicability of federal security guidelines including Federal Information Security Management Act (FISMA), and various National Institute of Standards and Technology (NIST) publications. She has led numerous external FISMA audits; successfully completed several Authority to Operate (ATO) packages for a major federal IT system; and effectively managed internal audit and self-assessment to obtain ATO for internal systems.

She holds a Certified Information Systems Security Professional (CISSP) certification, a Certified Cloud Security Professional (CCSP) certification, a Project Management Professional (PMP) certification, a Security+ certification, an AWS Cloud Practitioner Certification, and a Master of Business Administration (MBA) from Rutgers University.

linkedin.com  

Ken Fishkin - Information Security Manager - Lowenstein Sandler LLP

Ken Fishkin - Information Security Manager - Lowenstein Sandler LLP

Ken is the Manager of Information Security for the national law firm Lowenstein Sandler. He has developed the firm's cybersecurity and privacy programs from scratch and is currently in process of having them become ISO 27001 certified.

Previously, he worked at CohnReznick for over twenty years where he was Director of the Cybersecurity and Privacy Practice, performing cybersecurity and privacy assessments and developing programs for his clients.

Besides being President of the New Jersey (ISC)² Chapter, he is on the Executive Committee of the Legal Services Information Sharing and Analysis Organization (LS-ISAO) and mentors cybersecurity students via iQ4's apprenticeship program.

linkedin.com