Ron Ford Email & Phone Number

Beverly, Ma, Us

Boston, Massachusetts, United States

Leads the implementation of the MBTA’s enterprise risk management platform, updating the risk repository and piloting assessments to remediate findings.Assists technology leaders in understanding risk-based security controls for new technology deployments.Oversees all vendor risk management activities, ensuring comprehensive assessment and mitigation of third party risk.

Boston, Ma

Collaborated with CyberTrust Massachusetts to deliver strategic insights to state leadership regarding municipal cyber resiliency, threats, and necessary security enhancements.Established CyberTrust’s risk management program by devising strategic plans and programmatic elements to effectively address statewide cybersecurity risks, align with regulatory mandates, and foster ongoing resilience.Oversaw interview-based cyber risk assessments on municipal infrastructure to comprehensively understand, manage, and mitigate cyber threats across the Commonwealth of Massachusetts.Conducted evaluations of third-party solution providers for their security compliance features, integration capabilities, scalability, and specific security attributes to enhance municipal cyber resiliency.Provided mentorship to cybersecurity-focused interns from Bridgewater State University.

Boston, Massachusetts, United States

Spearheaded Rapid7's Governance, Risk, and Compliance (GRC) program, driving strategic planning, policy management, regulatory compliance, and awareness training initiatives.Successfully managed SOC 2 attestation and led Rapid7 to achieve its first ISO 27001 certification for the Information Security Management System and critical infrastructure.Directed the remediation of key findings from annual tabletop exercises, significantly boosting business continuity and resilience across enterprise services.Revamped the security awareness training program in partnership with HR, leading a seamless migration to a new learning management system.Orchestrated the comprehensive update of 30+ enterprise-wide information security policies and standards, ensuring robust compliance and risk management.Led security assessments for mergers, acquisitions, and third-party vendors, strengthening overall security posture.Facilitated high-level security policy and risk discussions with corporate executives, shaping strategic decisions.Oversaw complex customer contract reviews and due diligence processes, working closely with commercial legal counsel to mitigate risks.

Greater Boston Area

• Led the relaunch of CISA's Cybersecurity Engagement Program in New England, focusing on improving risk management and information sharing across sectors.• Managed and mentored four Cybersecurity Advisors to build and manage relationships with customers in New England.• Assisted organizations in customizing security strategies and enhancing incident response plans.

Chestnut Hill, Ma

Adjunct Professor in the Cybersecurity Policy & Governance Graduate Program at the Woods College of Advanced Studies.

Beverly, Massachusetts

Adjunct Cybersecurity Professor at Endicott College's Van Loan School in the Homeland Security Studies Program.

Mclean, Va

-While supporting CISA as a consultant, served as the metrics lead to develop performance measures for using the NIST Cybersecurity Framework developed by the National Institute of Standards and Technology by critical infrastructure stakeholders.-Developed programmatic and operational performance measures to demonstrate progress to Executive Order 13636 performance goals that were presented to the DHS Deputy Undersecretary for the National Protection and Programs Directorate.-Developed a white paper on linking the EO 13636 Goals with National-Level Outcome Statements for critical infrastructure, and developed critical infrastructure case studies and decision trees that informed CS&C senior leadership on the adoption of the Cybersecurity Framework.-Incorporated cybersecurity best practice recommendations into the National Infrastructure Protection Plan (NIPP) through collaboration with DHS Infrastructure Protection (IP) Integrated Task Force (ITF).

-Performed cyber risk assessments with public and private critical sectors and SLTT partners to evaluate an organization's operational resilience and cybersecurity practices.-Evaluated implementation and management of cybersecurity capabilities with the focus on operational resilience towards achieving business objectives.-Primary focus on service continuity, disaster recovery, asset designation and prioritization, training, situational awareness, vulnerability and incident management.-Served as Deputy Program Manager for the DHS Cyber Supply Chain Risk Management (SCRM) Program under the Comprehensive National Cybersecurity Initiative (CNCI 11).-Primary representative on multiple inter-agency working groups focusing on policy development, best practices, and continued integration of security, assurance, and resilience into global supply chains

Served as Information Assurance Lab Manager for vendor product testing at the Joint Interoperability Test Command Indian Head facility.Managed and delegated responsibilities for third party vendor product testing within a hardened environment.Oversaw succession of Code Analysis Vulnerability Assessments (CAVA) for software integrity of third party products.Performed network and system administration for DOD Common Operating Environment (COE) for the Test Execution Division.

Master In Science, Cybersecurity And Policy Management

Electrical Engineering

Bachelor, Computer Networking