David started his formal career as an operating systems programmer and systems architect which required that he look at not just the code he had written, but also how the resulting operating system might impact the applications that would run on the computer. Later, while serving in the US Army he was tasked to apply that approach to looking at different forms of systems and complexity regarding where & how US Forces were engaged. This required working within the integration of the staff functions (personnel, intelligence, operations, logistics and later civilian-military operations & planning). After his military service, he continued to apply a systems approach to his job and later as a consultant. He is recognized (and certified) as an ITIL Expert applying the approach that ITSM represents a management system. Since mid-2018 he has worked with clients to assist them to integrate their ITSM activities with the critical need to include better cybersecurity hygiene. Every organization thought they had a good cybersecurity program until they realized they’d been attacked or penetrated and missed it until long after the cybersecurity incident. As a result, he designed and build a course to address the need for organizations to develop a cybersecurity program that works and evolves to meet the rapidly changing threat landscape.

Presenting:

• Session 702: When, Not If: Lessons in Cyber-Security