Eric Hibbard, Cissp, Fip, Cisa Email & Phone Number

Sunnyvale, Ca, Us

Providing planning and program management for security and manageability related activities for Samsung’s fabric-attached storage devices. Coordinating Samsung’s compliance with relevant storage security standards from ISO, SNIA, TCG, NIST and OCP as well as those derived from Samsung’s participation in key security initiatives of its large customers. Responsible for defining and driving strategies for complying with these standards and processes as they pertain to Samsung’s NAND/SSD products, mainly for datacenter and edge applications. In addition, leading activities such as sensing and documenting threat models and approaches, determining product requirements, sensing and aligning to timeframes for adoption, setting feature priorities, surveying available IPs, and facilitating ecosystem activities. Also focusing on end-to-end security issues and considerations for high-performance datacenter fabrics, protocols, and interfaces as well as details of congestion management and flow control for TCP, RoCE, and IB, especially as these protocols start to carry NVMeoF traffic and supporting NVMe’s growing list of command sets. Represents the interests of both Samsung and key organizations (e.g., ABA, CSA, INCITS, IEEE, TCG, SNIA, etc.) in the development of domestic and international standards and other types of specifications.

Principal advisor/consultant for PrivSec Consulting LLC, which delivers security and privacy services, consulting, and materials for clients and industry around the world. Serving in leadership and advisory roles for INCITS Technical Committee Cyber Security (CS1), IEEE Cybersecurity & Privacy Standards Committee (CPSC), American Bar Association Science and Technology Law (SciTech) Section, Cloud Security Alliance (CSA), and the Storage Networking Industry Association (SNIA).

Santa Clara, California, Us

Led Hitachi Vantara's security strategies, specifications, designs, and risk/conformance assessments for the global product and services portfolio. Security/privacy SME working directly with high-value customers on solutions/deployments, issue resolutions, and best practices; participated in customer cyber and data breach investigations. Managed the product security team, coordinating activities with product management, engineering teams, and field accounts on go-to-market, support, and RFP response activities. Oversaw the cyber hygiene program for Hitachi products. Represented Hitachi on multiple standards and industry organizations and advised Hitachi executives and senior management on emerging technologies, including data protection, cloud computing, IoT, big data/analytics, artificial intelligence, blockchain, smart cities, etc. Served as a board member on the Hitachi ID Systems board of directors, member of the Hitachi Vantara’s Security Executive Council, and collaborator with Hitachi Vantara’s Global Privacy Officer. Internationally recognized speaker and author covering a broad range of subjects.

Santa Clara, California, Us

Led Hitachi Data Systems’ (HDS) security strategies, specifications, designs, security certifications, and risk/conformance assessments for the global product portfolio. Established mandatory and optional product security features and capabilities that facilitated cross-product interoperability. Security/privacy SME working directly with high-value customers on solutions/deployments, issue resolutions, and best practices; participated in customer cyber and data breach investigations. Collaborated with product management, engineering teams, and field accounts on go-to-market, support, and RFP response activities. Developed the vulnerability management/disclosure and the cyber hygiene programs for Hitachi products. Represented Hitachi on multiple standards and industry organizations, including serving as the ISO Editor for key standards (ISO/IEC 27040, Storage security; ISO/IEC 17788 Cloud computing – Vocabulary; ISO/IEC 27050 Electronic - Discovery). Advised HDS executives and senior management on emerging technologies; provided security and technology consulting to Hitachi Ltd. organizations. Served as a member of the HDS’ Security Executive Council and worked closely with the HDS Legal and Export Compliance teams. Internationally recognized speaker and author covering a broad range of subjects.

Santa Clara, California, Us

Led Hitachi Data Systems’ (HDS) storage security strategies, specifications, designs, and security certifications for the global storage product portfolio. Security SME working directly with high-value customers on solutions/deployments, issue resolutions, and best practices; established and oversaw the HDS Customer Security Benchmark Program to foster cross-sector collaboration with customers. Worked closely with product management, engineering teams, and field accounts on go-to-market, support, training, and RFP response activities. Represented HDS on key industry associations (e.g., SNIA, DMTF and FCIA) and standards development organizations (ISO/IEC, INCITS, IETF, IEEE, and W3C). Advised HDS CTO as well as executives and senior management on emerging technologies, trends, and regulations. Internationally recognized speaker and author covering storage security and data protection.

Served as the on-site Computer Security Officer (CSO) for the QSS Group support contracts at NASA Ames Research Center (ARC). Advised both NASA ARC and QSS Group management on a full range of ICT and security technologies and issues. Oversaw the operations of critical ICT infrastructure managed by ARC, including Internet time services (ntp.nasa.gov), name servers for both ARC and the DNS root zone (e.root-servers.net), Federal Internet Exchange West (FIX-West), and Metropolitan Area Exchange West (MAE-West). Designed and deployed secure, web-based file sharing capabilities for use by NASA management and separately for the NASA Office of the Inspector General (OIG), implemented continuous monitoring of the ARCLAN networks using Gigabit Ethernet-based IDS/IPS, redesigned the ARC Active Directory infrastructure, and deployed automated and centralized patch management for ARC desktop systems. Supported the technical phase-in team for the $281M Information Technology Service Contract at NASA ARC

Served as Raytheon's on-site, lead technologist overseeing all ICT activities on multiple performance-based contracts with NASA Ames Research Center (ARC). Advised ARC CIO and ICT management on technologies, strategies, re-engineering approaches, service models, business models, outsourcing, ARC and NASA standards and architectures, contingency planning, and disaster recovery. Proposed and led multiple IT infrastructure projects, including email (with antivirus & spam), calendaring, secure storage area networks (SAN), backups/archival, directory services (LDAP & AD), Windows infrastructure, file sharing, centralized authentication, web hosting, Stratum 1 time servers, and TLS VPN capabilities. Designed and deployed the ARC IT security perimeter and DMZ as well as led the Raytheon teams to acquire and implement the necessary security technologies (firewall clusters, VPNs, authentication services, etc.). Directed Raytheon's ARC-based IT security support (incident response, intrusion detection and monitoring, authentication, firewalls, and PKI). Led the Raytheon networking design activities associated with ARC's upgrade from a FDDI-based to a Gigabit-Ethernet based LAN as well as supporting the NASA Science Network (NSN), NASA Research and Engineering Network (NREN), and ARC’s role in the Federal Next Generation Internet (NGI). Served on Raytheon’s successful proposal team for the $1.8B NSF Science, Operations, and Maintenance Support for the United States Antarctic Program (USAP) Contract as well as participating as a Red Team member for numerous Raytheon proposals. Supported the technical phase-in team for the $148M Federal Information Processing Service (FIPS) Contract and the $65M IT Services (ITS) GSA Contract at NASA ARC.

Berkeley, Ca, Us

Led the Computing Sciences Directorate's reengineering team to modernize the LBNL computing services and infrastructure; delivered the implementation plan within 4 months and successfully advocated a 450% funding increase for the computing infrastructure. Founded (starting with a staff of 3 and ramping to 66 in six months) and managed the Computer Infrastructure Support (CIS) Department to enhance and operate the LBNL computing infrastructure (email, calendaring, director services, file services, and backups), to run a consolidated IT support center, to deliver a range of system administration services (Unix, PC, Macintosh, VMS) on a full cost recovery basis, and to implement the IT security policies and technologies. Awarded multiple indefinite delivery, indefinite quantity (IDIQ) contracts for desktop purchases (3000+) to facilitate standard PC and Apple configurations as well as to reduce the delivery times from 18 months to 10 days. Selected, procured, and implemented the iPlanet suite as the LBNL consolidated email, calendaring, directory services, and web infrastructure; orchestrated the orderly transition of 3000 users, using seven different technologies, to the new infrastructure.

Washington, Dc, Us

Provided operational management of NASA's largest production high performance computing center, as the Aeronautics Consolidated Supercomputer Facility (ACSF) Manager; supported 3000+ local and remote users. Administered a multi-program budget ($65M annually) with congressional visibility and managed a staff of over 220 civil servant and contractor researchers and engineers. Key negotiator for Agency-wide consolidation of both WAN and supercomputing resources; drafted the implementation plan for NASA's supercomputing consolidation. Established NASA's Consolidated Supercomputing Management Office (CoSMO) and successfully hired its permanent manager. Negotiated $13.6M from NASA HQ to buyout the lease on a Cray C90, saving NASA $2M in interest, and stabilizing the availability of production supercomputing resources. Handled, as the Technical Advisory Chair, the proposal evaluations and vendor selection of the Class 13 element (high-end servers/supercomputers) of the NASA SEWP II contract ($800M IT Government-wide acquisition contract). Oversaw the Division’s physical and information security activities, including the classified facilities, as the Data Procession Installation Security Officer (DPISO). Served as the Contracting Officer's Technical Representative (COTR) for the seven-year, $130M, Computational Capability Contract (CCR), managing and overseeing the technical elements of the outsourced production supercomputing capabilities and support services.