Opinion: Companies Aren’t Dedicating Enough Time To Cybersecurity Training

Opinion: Companies aren’t Dedicating Enough Time to Cybersecurity Training

Contributed by: Stephen Gilmer ADCG Advisory Board Member Certified Chief Information Security Officer (C|CISO) In July 2019, SANS Institute released its fifth annual SANS Security Awareness Report (SAR), which looks at how organizations manage a common risk: human error. While the report shows some positives, it ultimately demonstrates that the state of cybersecurity hasn’t significantly…

Stephen Gilmer

Stephen Gilmer is a Certified Chief Information Security Officer (C|CISO) with more than 25 years of experience as a technical expert and executive leader focused on securing technology companies’ most sensitive and valuable data and systems. Stephen previously was in-house CISO at both a biotechnology startup and at two Fortune 10 aerospace, defense, and technology companies. In these roles, Stephen designed and implemented sensitive data and IP security control programs; shaped policy at the national level and security framework formation; and proactively resolved complex investigation, audit, and regulatory oversight issues.

Stephen is a Six Sigma Black Belt who led the transition of the IT infrastructure of a private start-up to address the regulatory and operational requirements of becoming a publicly-traded company. As a CISO executive in an aerospace defense company subject to a consent agreement with the United States Government, Stephen also led global cyber investigations, risk analysis, engagement, and mitigation controls necessary for the organization to successfully navigate oversight requirements and re-establish credibility with Government customers. Concurrently, Stephen built and led the cyber security components required to support winning and executing multi-billion dollar government contracts.

Stephen frequently speaks at global cybersecurity conferences, publishes articles on the business necessity of proactive cyber risk management, and advises on and conducts cybersecurity education / training for corporate leadership including the Board of Directors, the C-Suite and Compliance Officers.

Back To Top