Marc Crudgington, Mba Email & Phone Number

Houston, Texas, Us

- Leadership, governance, and strategy for the IT Infrastructure and Cybersecurity programs globally, including operations on every continent in over 30 countries and over 150 locations.- Mentorship and leadership of Global Network Operations, Cloud Operations, Endpoint Operations, Regional IT Field Services NORTHAM, LATAM, EMEA, APAC regions, Cybersecurity GRC, Cybersecurity Engineering, IT Procurement and Asset Management and the Global Help Desk teams.Duties include mentorship, leadership, budget responsibilities, governance, and strategic input for initiatives related to:- Developing strategic plans and roadmaps for IT Infrastructure and Cybersecurity - Global SD-WAN implementation- Global rollout of a new SIEM and MSSP- Strategy and governance of our Cloud environments- Global implementation of an Information Protection (Data Classification and Labeling) project- Vulnerability Management and Patch Management- Global VPN sunset and implementation- Global consolidation and implementation of a physical security access control (badging) and camera platform- Developing cyber resiliency strategy and plan in regards to data and system recovery- Tracking and monitoring project statistics- Plan development of a Global NAC rollout- Identity and Access transformation- Planning and directing security assessments and pen test- Responding to country, government, and client cyber security requests and assessments- Leadership reporting- other

Provide advisory services to venture capital firms, startups, and larger companies and serve on customer advisory boards. Advisory services include:Strategy - Risk Management, Security Vision, Compliance, Go-to-Market (GTM) Strategy - Security Differentiation, Customer Assurance, Risk Communication, Product Portfolio - Security by Design, Threat Modeling, Feature Prioritization, Customer Segments - Segment-Specific Risks, Industry Standards, Customer Trust, General Advisory - Security Culture, Vendor Management processes, Investment Due Diligence, and Operation Support - Technology Stack, Policy DevelopmentFirms and organizations whose advisement services have been provided to:Lightspeed Venture PartnersGTM CapitalISTARI GlobalIbex Investors (Denver Office)Red Ventures (vCIO/vCISO capacity)Lightspin (acquired by Cisco)OptivCritical StartZecurityExabeamTexas Bankers AssociationInfraGard (Houston chapter)multiple technology and cybersecurity conference advisory roles.

CyberFore Systems, established in June 2018, as a venture to help with cybersecurity consulting needs, is built and operated by CISOs and C-level executives for CISOs, C-level executives, and the Board. We are a veteran-owned business founded by an award-winning CISO and author of The Cyber War Is Here: US and Global Infrastructure Under Attack, A CISOs Perspective and The Coming Cyber War: What Executives, The Board, And You Should Know. vCIO/vCISO advisory services that advise Boards, C-level executives, and CISOs on all aspects of cybersecurity, incident response, risk management, data privacy, and technology consulting. Provide consulting services to Venture Capital and start-up companies on cybersecurity products. Recent/current engagements:vCISO for an established Financial Services CompanyvCIO/vCISO for a startup neobankCIS Controls Assessments for a chemical companyPenetration Test/CIS Controls Assessment for an Oil Gas, Energy CompanySecurity Architecture Assessment and Cyber Strategy for an Oil, Gas, Energy CompanySecurity Architecture Assessment and Implementation Roadmap for a Mining CompanyApplication Security Assessment for a Development companyCloud Migration Strategy and Architecture for a Property Management companyBoard Advisory on Cyber Strategy for a Financial Services companySourcing cyber products and product recommendations for Financial Services, Oil, Gas, Energy, Medical companiesConsulting services, assessments and solutions offerings include: vCISO/vCIO servicesCybersecurity Strategy and Program developmentCybersecurity Resiliency and Program maturityBoard Governance of Cybersecurity programsData privacy maturity and assessmentsRansomware protection Incident Response developmentVulnerability Assessments, Penetration TestSecurity Awareness TrainingCybersecurity product selectionBoard and community speaking engagementsand other.

The Woodlands, Texas, Us

High level list (not intended to be comprehensive of Chief Information Security Officer:> Developing, implementing, and overseeing the organization's cybersecurity program to ensure and effective and cyber resilient posture> Board and Board Committee reporting and relations (develop of Board acumen, Board cyber governance, cyber risk, current event information)> Aligning cybersecurity and business objectives while maximizing ROI on security-related decisions> Creating a program consisting of security architecture, design, and operations to ensure effective data governance and a proactive security posture> Protecting organizations information assets (operational, IoT, ICS) against cyber threats> Reporting cybersecurity risks to executive management, including outside of reporting structure if necessary; see https://www.wsj.com/finance/regulation/sec-sues-solarwinds-over-2020-hack-attributed-to-russians-70562fb5 > Developing threat hunting and cyber resilient processes to stay ahead of the evolving threat landscape> Promote a culture of strong information security> Monitoring incident response activities and cultivating team expertise in response> Managing vendor relationships throughout the lifecycle – vendor inclusion in proposal, vendor proof of concepts, onboarding, cultivating the partnership, and extracting vendor value from offerings> Utilizing cybersecurity budgets effectively to mitigate risk to align with Board risk tolerancehttps://www.forrester.com/blogs/five-reasons-why-cisos-should-report-to-ceos/ https://www.techtarget.com/searchsecurity/tip/Why-the-ideal-CISO-reporting-structure-is-highest-level

Spring, Us

Reporting to the CEO, COO, and CIO, perform the following CISO duties:Initiatives- Oversee and direct information security strategy and program, lead related projects; created 3 year information security strategy, revised information security program to align with the NIST Cybersecurity Framework and ISO 27001, PCI, GDPR, and CCPA, including the FFIEC Cybersecurity Maturity Assessment/other Maturity Assessments, Information/Cybersecurity controls, and additional aspects of the program such as budget, IS staff, other.- Enterprise IT Risk, IT Asset Risk; liaison between IT and the Enterprise Risk Department to establish and assess annually IT risks in IT Security Management, GLBA/Privacy, IT Governance, IT Operations, and IT Assets.- PCI DSS, GLBA, other banking regulations; oversaw the achievement of initial PCI ROC, encompassed PCI requirements in the Information Security Program to include requirements testing and ensuring readiness to achieve PCI compliance. Maintain program to ensure annual GLBA/Cybersecurity audit is successful - security controls are in place and adhered to.Other responsibilities include:- Data Privacy (PII), Data Loss Prevention, Data Management- Intelligence and Threat Management- Governance, Service-delivery process, SaaS- Process improvement, policy development/oversight- Contract review, Audit review, Vendor management review- Chair & participate in relevant committees (IT Steering, Information Security, IT Management, Patch Management, Data Loss Prevention)- Volunteer: Optiv Advisory Board, Infragard Board Member - Houston Chapter, TBA (Texas Bankers Association) Technology Committee Member, DHS Threat Information Sharing Framework Workgroup, CBA (Community Bankers Association) Data Privacy and Security Working Group, SIM (Society of Information Managers) Committees HMG CISO Advisory Board, SecureWorld Advisory Board, Texas Technology Summit Governing Body member, other Advisory Board and speaking engagements.

St Louis, Missouri, Us

• Oversee and direct the enterprise’s IT governance, risk, and due diligence, and business integration initiatives which serves over 41,000+ employee's in over 67 locations• Developed a 3-year IT Strategic Plan outline that linked IT to business initiatives, providing executive leaders with clarity of the technology investment and IT colleagues’ actionable plans and metrics regarding alignment to the strategic technology roadmap• Orchestrated IT due diligence including risk assessments, technology portfolio analysis, and alignment strategies for 19 requests covering all IT assets and operational processes aiding acquisition of 15 companies valued at over $350M and an Advantage Sales and Marketing equity transaction of $1.8B. Direct the M&A IT due diligence and integration team.• Led cost efficiency and process improvement initiative involving business and IT leaders to develop and track KPI’s, SLA’s, and budget spend to deliver business value through technology assets and services improving alignment and visibility across the enterprise• Directed a multi-division corporate Personally Identifiable Information (PII) program that mitigated enterprise data risk related to HIPAA, GLBA, and state regulations; chair the PII Incident Response Team • Achieved a cost reduction directing a program to utilize CA Service Center in accordance with ITIL and SDLC methodologies eliminating stand-alone systems• Collaborate with vendors and internal business partners on strategic initiatives to research long-term software solutions in the areas of ERP, Payroll, and Application Lifecycle Management tools which are used in a .NET/Visual Studio 2010 environment• Implemented a sustainable control framework, based on CobIT, Val IT, Risk IT, COSO, ISO 31000, PMI standards and incorporated IT best practices, resulting in a reduction of initial PwC annual audit findings from 6 to 0 (2011), IT annual audit comments from 27 to 0 (2011) and an increase in resource efficiency

LLC's that I have started and served/serve as PresidentApex Consulting Group (contract):• See 3Com descriptionPacific Technology Consulting Group (contract / volunteer):• CIO adviser (SDLC, application consolidation, IT governance, risk)• IT Governance, Risk consulting• SDLC / ALM consulting / Agile-Scrum• IT Project Management consulting• IT Business Analyst, Finance • SOX (Sarbanes-Oxley) consulting• PMI Orange County Chapter PMP Exam Prep Instructor

Milwaukee, Wi, Us

• Assigned with developing IT solutions and implementing best practice methodologies and frameworks across a variety of client architectures from industries which include banking, insurance, government, technology, and manufacturing. • Led IT engagement projects to include: SOX audit, Disaster Recovery, business development, process mapping, process improvement, and framework implementations. • Successfully led initiatives to design and document best practices, policies, and plans for IT controls, IT Risk, GLBA, HIPAA, PCI, Disaster Recovery, client engagements in the Southern California area.• Mentored and led team of 4 to analyze a company’s internal control environment ensuring proper IT processes and practices were aligned with business unit processes resulting in a risk reduction to the enterprise technology environment.Client list:Boeing - IT Risk assessment, IT controls engagementUS Government (FEMA) - Contracts assessment and reviewMindspeed - IT controls engagementMercury Insurance - IT controls engagementSouthern California Edison - IT Risk assessment, IT controls engagementReliance Steel/Earle M Jorgenson - IT Risk assessment, IT controls engagement

New York, Ny, Us

• Executed engagements utilizing business process improvement and IT strategy and planning acumen for banking/finance, entertainment, technology, and education clients.• Managed, led, performed consulting practices on engagements of over $10M in revenue for Business Continuity/Disaster Recovery, IT risk assessment, SOX audit, GLBA, HIPAA, PCI, Vulnerability assessment, process improvement, control implementation, and strategy alignment projects• Developed new business opportunities to include: strategic IT planning, process improvement, business impact analysis, and IT risk assessments for national and international clients.Client list:Chevron - IT controls engagementDisney - IT controls engagement, ERP control review (SAP)Fluor Corporation - IT controls engagementSage Software - IT Risk assessment, Security assessmentAutobytel - IT controls engagement, IT Risk assessmentIndyMac Bank - IT Risk assessment, Business Continuity/Disaster Recovery assessment, GLBA audit, IT controls engagementFremont Investment and Loan - IT Risk assessment, Security assessment, IT controls engagementCorinthian Colleges - IT controls engagementKinecta Federal Credit Union - Business Continuity/Disaster Recovery assessment and auditFirst Bank of Beverly Hills - SOX audit (accounts receivable, financial system review)

Lisboa, Pt

• Senior engineer working with customers to understand and prioritize business requirements and demonstrate ONI optical switches and network management software• Documented and verified software and systems for release of optical networking carrier service platforms to include: metro CWDM/DWDM access and core ONLINE switches, SONET interfaces, ESCON mux, FC and GbE optical modules, and OPTX network management software suite; utilized Perforce as release management tool, SilkTest, WinRunner, LoadRunner test tools, traffic generators, oscilloscopes, and spectrum analyzers for test equipment• Performed client/server testing (white box/black box) on Windows, AIX, HP, Solaris platforms to include GUI, system, performance, unit, functional, load, integration, regression, and acceptance in an agile development environment; Windows/UNIX server/client with Oracle database on the back-end

Hanover, Maryland, Us

See ONI

Marlborough, Ma, Us

Senior Product & QA Engineer • Provided 3Com solutions for clients on premises and at the client site through development of product implementation strategies and demonstrating the 3Com Transcend Network Management Software• Gathered and documented product requirements and produced product roadmap on 3Com network devices and software applications related to Transcend• Tested complete suite, both client and server, of Transcend (Windows/AIX, Solaris, HP) on multiple products (CoreBuilder, NetBuilder, SuperStack, OfficeConect); used ClearCase release management and WinRunner, LoadRunner test tools throughout the ALM (Application Lifecycle Management) process.Network Lab Manager • Procured and installed 3Com networking equipment (routers, switches, hubs, test devices, monitoring devices, etc.) in differing network topologies• Maintained the lab to include servers and PC’s that were used for testing TranscendNetwork Engineering • As part of the WAN division, set up various types of 3Com gear in differing network topologies, procured network equipment (routers, switches, hubs, test devices, monitoring devices, etc.)• Built out an Windows NT 4.0 network to support approximately 250 workstations; network included full backup/restoration and print server capabilities

Randolph Afb, Tx, Us

Computer Information Systems Specialist• System Administrator for the DoD enterprise DISN (Defense Information System Network) at Ramstein and Onizuka Air Bases• Provided telecommunications support for DoD contractors, world-wide USAF bases, and US government agencies at Ramstein and Onizuka Air Bases• Assisted in managing the PC Support Center at Ramstein AB in Germany• Provided communications support to NASA for Space Shuttle launches from 1994 – 1996 at Onizuka Air Base• Performed LAN/WAN administration tasks on the Onizuka Air Station network from 1994 - 1996

Mba, Strategy, Technology

Nacd Cert Certificate In Cybersecurity Oversight, Board Of Directors Cyber Risk Oversight

Certificate Of Attendance, Cybersecurity

Certificate, Artificial Intelligence

Certificate, Blockchain

Bs, Business Administration, Management And Operations