Richard Pitts Email and Phone Number

In this role, I transitioned the CPE Incident Response Management ownership from Corporate to the Connected Home Business unit and now lead it. I optimized the Security Governance meetings to be more efficient and added issue tracking tools. With the corporate Security Assessment (pen-test and security analyst) Team, I triage issues and coordinate with Legal and Business teams on early warnings, security trends, and to create and distribute Security Advisories. Locations supported: US, France, Belgium, Brazil/LATAM, EMEA, Japan, India, South Korea. As the Incident Response Director, I have developed a good working relationship with the 10+ primary product security contacts and the corporate security team, including being an occasional division representative to the CSO's Quarterly Security Review. We are migrating the tracking tools to better aligned with the projects. I created and presented multiple, worldwide, on-site and remote Security Training Process Overviews and coordinated a two day multi-presenter Security Workshop for the technical and customer facing teams. These training sessions focused on legal, existing resources, newly developed resources, and on-going training efforts, along with improving awareness of new policies and procedures. I also monitor new development kickoff announcements for new project leaders and offer as needed, project specific training to avoid last minute surprises in the project. Training locations: US, Brazil, France, China, India, Belgium. As part of the security program, I also schedule and prioritize product pen-testing by balancing the availability of new product candidates, the business demands, and the limited test resources. Along with these primary responsibilities, I routinely worked with the Legal team to review security amendments for customer and partner agreements, including occasional divestiture and merger activities. I also contributed to the successful ISO27001 certification effort.

In this role, I managed a team of 27 consisting of platform security engineers, factory test engineers, factory data creation and delivery engineers, and an enablement operations team. This team prepared software and test stations for new product introductions at the factories, content and link protection data generation and delivery, and the processing and delivery of customer enablement data for a $3B cable and IP CPE high volume production worldwide operation: US, Canada, Mexico, India, China, Vietnam, UK, France, Belgium, Brazil, Japan, and Taiwan. This included being responsible for business continuity, process efficiency, and uptime of the respective components. The cryptographic image signing systems and services were also part of the team's responsibilities for development and customer delivery. The team was also responsible for compliance and guidance to others for internal and 3rd party security requirements.Along with these primary responsibilities, the team provided support to the repair process.I also performed reviews of customer and partner legal agreements and security architecture analysis and guidance for internal and external customers.

In this role, I had two primary responsibilities: (i) divestiture/merger integration and (ii) management of the platform security team for the $4B revenue worldwide operations.For the divestiture and merger, identified and negotiated short and long term technology sharing service agreements at the sale of the Cisco CPE business unit to Technicolor, USA. This included working with legal, business, and technical contacts within Cisco and Technicolor. A business continuity site was moved from Texas to Indiana. The export of Cisco housed historical manufacturing data and HSM protected signing keys was migrated to existing and new Technicolor infrastructure, which included a new company HSM based signing system. For integration of the new entity, we restructured the French and US Security Department.For the management of the 6 person platform security team, this included redefining the Platform Security Delivery Team Roles and Process Alignment, along with project prioritization, work estimates, operational efficiency,. This platform security team was responsible for implementation and guidance of these platform aspects: Secure Boot, Conditional Access Compliance, Technicolor PowerKEY Security Officer, High Value Content Protection Keys, SoC Vendor Security, Secure Micros, and Chain of Trust.

In this role, I managed the 5+ member platform security and provisioning team for the high-volume $2B revenue worldwide operations.This platform security team was responsible for implementation and guidance of these platform aspects: Secure Boot, Conditional Access Compliance, Technicolor PowerKEY Security Officer, High Value Content Protection Keys, SoC Vendor Security, Secure Micros, and Chain of Trust. I was an active participant in the technical decisions.

Firmware Development and Production security liaison for Taiwan engineering partner. Compliance and on-site Test for security vendor. Team size: 2 internal + 2 at factory partner

Firmware Delivery for testing and security, liaison for Juarez, Mexico factory. High-volume, team and project management/prioritization, factory efficiency.Team size: 15

Firmware and Production testing and security and liaison for Juarez, Mexico factory.Factory operations support for Secure Micro Programming Handlers

Secure Micro Firmware Port, Factory Programming and Handler Installation, System Validation

Small team implementation and testing of a VxWorks, client/server, peer-to-peer, telephony data exchange application.

Embedded Software Development for AGM-130 missile systems training. Ada, TI DSPs, analog and digital I/O, GPS, dual-port RAM, Built-In-Test, IR Camera, non-uniformity compensation. Intranet email notification service.

Architecture and Software Design of VME COTS 5 MHz, 14 bit A/D and Data Subsystem. GPIB controlled Radar Test Target Return Pulse Generator Simulator. Analog and Digital Filter and Control System analysis. VME, DEC Alpha. VxWorks, C, 68K, IEEE-488, SCPI, Unix, VMS, Windows, DLL and MathCAD.

IR Camera subsystem Software Design and on-site support: control, system calibration for non-uniformity compensation, user interface, and test suite for hardware debugging, real-time and interrupt driven I/O, and video test pattern generation. Extended Built-In-Test to include data path, DSP hardware, A/D, D/A, and Op-Amp. Chair of Software Technology Assessment Team and Interim Chair of Software Engineering Process Group. Motorola 68302 C/assembly, Ada, Unix.

R&D: real-time sixty-four processor, crossbar switch, parallel MIMD, to classify solution requirements and propose new architectures. Software Design of 3&6-DOF real-time missile simulations: X-Windows, inter-processor communication and test. Hardware Design of analog and digital hardware. Authored Programming Overview for the Parallel Function Processor. CISC and RISC Multibus I/II s computers, Unix, C, FORTRAN, Pascal, VMS, DOS, TCP/IP.

Designed and Implemented 2-D robotic vision system (256x256 camera, 68000, DMA, A/D, Unix, C, and assembly)Instructed junior/senior classes (introduction to microprocessors, FORTRAN, Pascal, and electronics lab.)Assisted in software debugging on a VAX/VMS system, in addition to terminal repair and installation.

Specified and installed a security modem system to achieve remote use of the plant's Local Area Network.

Operational maintenance on DEC PDP-8/E and PDP-11 computers and peripherals, and stock-room accountability