ITEC 3761: Cybersecurity PolicyThis course introduces the concepts of risk assessment, and acceptable use and enforcement of information technology security policies. Students will develop a comprehensive information technology security policy.

At CyberGRX, we help our customers understand the cybersecurity risks posed by their third parties: suppliers, vendors, affiliates, partners and others. We combine cybersecurity assessments and predictive analytics into a risk-oriented platform that allows both customers and third parties to understand and manage cybersecurity risk.Using a combination of qualitative and quantitative assessment data, threat intelligence, Internet scans, and publicly available company demographics, we… Show more At CyberGRX, we help our customers understand the cybersecurity risks posed by their third parties: suppliers, vendors, affiliates, partners and others. We combine cybersecurity assessments and predictive analytics into a risk-oriented platform that allows both customers and third parties to understand and manage cybersecurity risk.Using a combination of qualitative and quantitative assessment data, threat intelligence, Internet scans, and publicly available company demographics, we build analytics for individual companies that:- Estimate cybersecurity maturity- Estimate the effectiveness of cybersecurity controls- Identify high risk weaknesses and make mitigation recommendations- Identify likely threats and estimate the likelihood that the threat can be stoppedFor a customer with multiple third parties, we consolidate data from individual companies into ecosystem views. These analytics provide a tailored view of:- Systemic weaknesses across their third party ecosystems- Critical vulnerabilities within the ecosystem that have the potential to damage the customer- Key risks and recommended ecosystem-wide mitigationsMy team and I develop models and associated algorithms, write the code to implement these, and then deploy them as part of a larger system. Key technology includes graph and relational databases for data management, Python as the primary coding language, and graphql as the primary mechanism for exposing analytic results. Show less

My primary research area was the modeling of high uncertainty system dynamics for the purpose of quantifying risk. This risk estimation effort was applied to the problem of modern asymmetric warfare (AW). I developed algorithms that used human factors. geomorphometry, static and dynamic populationstatistics, weather and communications patterns to assess the utility of specific geographic locations for AW.See my publications for a link to the dissertation and other conference… Show more My primary research area was the modeling of high uncertainty system dynamics for the purpose of quantifying risk. This risk estimation effort was applied to the problem of modern asymmetric warfare (AW). I developed algorithms that used human factors. geomorphometry, static and dynamic populationstatistics, weather and communications patterns to assess the utility of specific geographic locations for AW.See my publications for a link to the dissertation and other conference papers that emerged from this research effort. This research was transitioned to the Office of Naval Research in 2013. Show less

I held a number of positions in military intelligence. Contact me for details.