Bill Corbitt Email & Phone Number

Irvine, California, United States

Tampa/St. Petersburg, Florida Area

The USF Cybersecurity Advisory Committee is a joint initiative of the university’s Muma College of Business, the School of Public Affairs, and the Florida Center for Cybersecurity that helps executives from private, public and non-profit sector organizations identify cyber threats and assess strategic cybersecurity risks.In 2018 I was honored to this leadership role shaping and building the organization’s strategic vision, influencing the evolution of the university’s cybersecurity curriculum and policy, and incubating a service portfolio providing consulting expertise to regional businesses. In this capacity I represent the USF in community and business development, cultivate relationships with C-suite leaders, and serve as an adjunct professor in the cybersecurity program.

Herndon, Virginia

GuidePoint Security LLC is a Virginia-based cyber security company that provides world-class solutions designed to create a safer, more secure technological environment for our customers and citizens.As National Practice Director of GuidePoint’s DFIR group, I direct the digital forensics of incident responses on behalf of our clients, build actionable intelligence, and serve as change agent, general manager, and P&L owner. My team of security staff and consultants perform client incident responses, breach analytics, e-discovery, and forensics on mobile, hosted, and cloud environments, and design proactive countermeasure models protecting intellectual property and reducing cybersecurity risks and weaknesses. In addition, I am responsible for building and executing the DFIR practice revenue and business development strategy and influencing the internal adoption of best practice in security. Notable achievements:►Building a robust DFIR practice that has been helped our client CIOs, CTOs, and Boards of Directors decrease enterprise risk.►Sharpening our service model and solutions to accelerate the closure of weaknesses in technology, processes, and governance.►Incubating a new portfolio of monitoring and forensics services for threat anticipation and response that provide critical insights and legally-admissible evidence.►Strengthening the practice’s P&L performance by successfully cultivating enterprise client relationships with Fortune 500 clients in banking, automotive, retail, pharmaceutical, manufacturing, payment card industry (PCI), and other sectors.

Portland, Oregon Area

Nike, Inc. is an $35 billion, Fortune 100 company that designs, develops, manufactures, and markets footwear, apparel, equipment, accessories, and services.In 2014, I was Recruited to build and lead Nike’s newly-created organization charged with developing and implementing the strategic cybersecurity vision across the entire company. I hired and managed a team of 43 managers and staff providing best-in-class digital risk management and incident response for the company’s global digital footprint spanning 147 countries with more than 50,000 direct endpoints and 2.4 million subcontracted and affiliate network endpoints. Notable achievements:►Leading the creation, adoption, and management of enterprise security systems, processes, and programs as the liaison to the company’s C-suite and Board of Directors.►Architecting a visionary global cybersecurity framework greatly reducing risk across the company. Through this new framework, we detected and closed more than 1,000 day-one threats (IOCs) led global collaboration, implemented proactive security measures, and built new ways of working.►Creating the industry’s first Intellectual Property Threat Protection Analysis Division, that achieved an 86% (+46%) accurate prediction of fraudulent activities and risk, and that received the highest rating from E&Y’s auditors. I subsequently was invited to disseminate our findings to the Retail ISAC.

Atlanta, Ga

PSC is a leading PCI and PA DSS assessor and Approved Scanning Vendor. PSC is one of an elite few companies qualified globally to provide expert services and solutions to organizations that require specialist compliance or consulting support in the areas of payments, security, or compliance.As the Senior Consultant with PSC’s PCI Security & Compliance Practice, I project managed digital risk analysis and forensic incident responses of payments security and compliance systems as the strategic partner to PSC’s portfolio of enterprise clients. In this capacity, I managed a team of two analysts conducting incident responses, analytics, e-discovery, cultivation of forensics, and building risk mitigation and countermeasure frameworks. In addition, I served as the division’s practice leader and as the quality & security assessor for PSC’s Payment Forensic Investigation (PFI) business unit. Notable achievements:►Managing comprehensive client compliance assessments and leveraging our findings to build, recommend, and implement solutions and strengthened security protocols protecting both customer and business information.►Founding and leading PSC’s PFI division from inception into a top-rated risk advisory and mitigation group engaged to analyze and build unique solutions in response to enterprise credit card order compromises.►Personally leading the identification and closure of a significant client zero-day incident, mitigating millions of dollars in risk and safeguarding our client’s interests.

Greater Atlanta Area

In 2001 I founded and led this consultancy that provided global enterprise clients a strategic portfolio of enterprise services in the areas of digital compliance, security, forensics, and incident response. As the firm’s principal consultant and engagement leader, I was responsible for working with my clients to identify risks, develop countermeasures, and build remediation plans. Notable client engagements:►Verizon – I served as the lead quality security assessor on a major program charged with analyzing and remediating risk for MasterCard’s full spectrum of security and compliance programs. In this capacity, I provided the company’s strategic leadership on the identification and resolution of zero-day exploits and malicious network activities, and in the development of security protocols and best practices in incident response.►Bahrain Defence Force – On behalf of the national government, I led an analysis of the ministry’s wireless structures and recommending technical remedies and new security protocols.►Home Depot – I conducted comprehensive security assessment and review on the company’s PCI protocols.►Walmart – I served as the PCI Team Lead for an extensive PCI Compliance and Remediation effort for Walmart’s ISD, leading a 30-person team on custom data discovery initiatives, PCI Compliance guidelines, and comprehensive network security design initiatives. At the time this, this was the largest, most comprehensive security and compliance initiative ever undertaken at the time and was completed on time and under budget.

St. Louis, Mo

Lead QSA for a MasterCard Worldwide multi-year (global) security and compliance initiatives. This global initiative exposed many internal disciplines to MasterCard’s 'cradle-to-grave' security and compliance initiatives. In working with the professionals at MasterCard we were able to implement improvements in security and compliance processes, network and product redesign initiatives as well as a wide range of product improvement processes for all MasterCard members. Through this I became intimately familiar with the deepest levels of a payment brand’s secure card-processing infrastructure. I have been one of the fortunate few who was given the privilege of working directly with their security, development, application, production, forensics and incident response teams in matters of corporate and national importance. Our activities included focusing the MasterCard teams in aspects of providing direction and guidance to thwart the potential of “Zero Day” exploits, incident response for malicious network activity and direct executive level guidance on matters regarding security, compliance and incident response.

I was the first "Westerner" in the history of Bahrain to have the honor in being invited, and attend, a Royal Family Member's Islamic "Mcleish" in Bahrain.A "Mcleash" is a gathering of Islamic business, political and Royal Family leaders who periodically gather to network and discuss business, politics and resolve critical issues that are relevant to their country and economy. It is considered a "High Honor" by the Crown to extend an invitation to a westerner.

Greater Atlanta Area

INSURETrust’s founder, Steve Haas, was the originator of the world’s first cyber-liability (hacker) insurance and co-author of the world’s first technical underwriting standards used by the insurance industry today.I was a central collaborator on the firm’s founding, business model incubation, and product development with this startup firm. As Vice President of Security, I designed the underwriting assurance and assessment model, and built the go-to-market strategy.The INSURETrust team built an innovative and highly influential underwriting model that was subsequently duplicated by leading insurance providers.