Suggestions
Chris Hughes
Security Service Edge - Enterprise Cyber Defense (30K connections capacity)
Chris Hughes is a cybersecurity expert with nearly 20 years of experience in IT and cybersecurity.12 He joined IANS as a Faculty member in 2024 and provides guidance to clients on various aspects of cybersecurity.1 Hughes has a diverse background, including:
Professional Experience
- President and co-founder of Aquia2
- Cyber Innovation Fellow at CISA (Cybersecurity and Infrastructure Security Agency)3
- Chief Security Advisor at Endor Labs3
- Former civil servant in the U.S. Navy and the General Services Administration's FedRAMP program2
- United States Air Force veteran2
Expertise
- Vulnerability management
- Software supply chain security
- Cloud security
- Compliance (e.g., FedRAMP, RMF, NIST 800-53, 800-171, CMMC)
- Risk management, governance, and cybersecurity leadership1
Education and Certifications
- Master of Science in Cybersecurity from Dakota State University
- Master of Business Administration from Strayer University
- Bachelor of Science in Information Technology Systems
- Various industry certifications, including CISSP/CCSP from ISC2, AWS and Azure security certifications, and Cloud Security Alliance's Certificate of Cloud Auditing Knowledge (CCAK)2
Publications and Contributions
- Co-author of "Software Transparency: Supply Chain Security in an Era of a Software-Driven Society" (Wiley)23
- Author of "Effective Vulnerability Management" (Wiley)1
- Regular speaker at industry conferences and contributor to thought leadership pieces on software supply chain security23
Chris Hughes is also an adjunct professor for cybersecurity master's programs at Capitol Technology University and the University of Maryland Global Campus.2
Highlights
Cloud Security
The world of cloud security continues to evolve, including the role of the Cloud Native Application Protection Platform (CNAPP)
It can be hard to keep up with it all, and see where it is headed, or where we've been.
However, this masterclass of an article from James Berthoty Latio Tech and Francis Odum Software Analyst does just that.
It clearly and amazing lays out:
-
A brief history of cloud security and the various evolutions of tools we've seen
-
Key innovations, from open source tooling to commercial companies such as Wiz and Palo Alto Networks (and many more)
-
The role of agents vs. agentless tooling and where both fits in
-
Some limitations of CNAPP and what the future of CNAPP looks like
This is a VERY comprehensive piece, covering so many tool categories, products, vendors and more.
If you're involved in AppSec, Cloud Security etc. I strongly recommend reading it!
https://lnkd.in/ePu8_JdQ
#ciso #cyber #cloudsecurity
In this episode we sit down with industry leader Ross Young to discuss the keys to becoming a CISO. Ross is the current CISO at Team8, former CISO at Caterpillar Financial Services, Divisional CISO at Capital One and former CIA.
