Suggestions
Bill Burns
GVP - Sr. Advisor Informatica | Former CISO | CISSP, QTE
Bill Burns is a senior executive at Informatica with extensive experience in information security and business transformation. Here are some key details about his career and role:
Current Position
Bill Burns currently serves as GVP - Sr. Advisor at Informatica, a position he has held for over 9 years. He joined the company in 2014 to help transform Informatica into a trusted, enterprise cloud data management platform.2
Previous Roles
Prior to his current advisory role, Burns held the position of Chief Information Security Officer (CISO) at Informatica.3 He has over two decades of experience in security, with a specialization in cryptography and communications.4
Expertise
Burns is recognized for his expertise in:
- Information security
- Business transformation
- Cloud data management
- Privacy protection
He is also a Certified Information Systems Security Professional (CISSP) and Board Certified Qualified Technology Expert (QTE).1
Industry Involvement
Burns has been involved in shaping information security strategies beyond his role at Informatica. He previously worked at Scale Venture Partners to define their information security investment strategy.3
Professional Presence
Bill Burns maintains an active professional presence on LinkedIn under the username wdburns, where he shares insights on topics related to information technology, security, and business transformation.2
His long tenure at Informatica and progression through various leadership roles demonstrate his significant contributions to the company's growth and evolution in the cloud data management space.
Highlights
When I’ve experienced previous security events “in the news”, the team would analyze them against our capabilities to see how we could improve our cyber resiliency. Then we’d share the premortem with our peers, leaders and Board.
As a security leader - if you’re not doing something like this already, this is a good tool to add to your internal risk management toolbox, especially with the new SEC Cyber disclosure and risk management guidance. It’s a great way to have a “security conversation” without having a security conversation. As a Board member, you can do this yourself, then compare notes with your CISO and management team.
I couldn’t fit the process into a LinkedIn post, so i published my thoughts to the link below instead. Hope it’s helpful to those who want to turn the recent CrowdStrike incident into a learning experience, even if you weren’t directly affected.
What else would you add to this process, or do differently?
Here’s a useful site that is tracking cybersecurity disclosures in SEC Form 8-k filings: https://lnkd.in/gegrCsKh
They appear to be monitoring for both “Item 1.05” Material Cybersecurity Incidents, in addition to ‘Item 8.01” other events which is where non-material cyber incidents could go, plus they do lightweight analysis of the filing.
h/t to Donna R. for the link from Digital Directors Network
