Suggestions
Cody Scott
Chief Cyber Risk Officer at NASA
Cody Scott is a cybersecurity and risk management expert who served as NASA's first Chief Cyber Risk Officer from 2018 to 2023.13 In this role, he led efforts to accelerate risk management practices within the agency.3
Career Highlights
NASA Experience: Scott's tenure at NASA involved collaborating with mission teams to enhance cybersecurity risk management across the organization.1 His work focused on implementing innovative approaches to protect NASA's critical space and aeronautics programs.
Current Role: After leaving NASA, Scott joined Forrester as a Senior Analyst in Security & Risk.56 In this position, he continues to share his expertise in cybersecurity and risk management, drawing from his experience at NASA and other government agencies.
Expertise and Contributions
Scott is recognized for his knowledge in:
- Cybersecurity risk management
- Space security best practices
- Risk resilience strategies
He frequently shares insights on these topics through professional networks and industry events.57
Professional Background
Prior to his role at NASA, Scott held several positions in product design and user experience:
- Senior Product Designer at Command Alkon
- Senior Product Designer at CommentSold
- Senior Product Designer at Cambia Health Solutions
- Senior UX Designer at Ureeka
This diverse background in design likely contributed to his ability to communicate complex risk management concepts effectively.2
Education and Certifications
While specific educational details are not provided, Scott holds several professional certifications, including:
- Certified Expert Risk Management Framework (RMF) Professional
- NSTISSI No. 4011 - Information Systems Security (INFOSEC) Professional4
These certifications underscore his expertise in cybersecurity and risk management frameworks.
Highlights
Last week in Vegas flew by as our team attended #BlackHat! Sandra Carielli, Allie Mellen, Erik Nost, Padraic Harrington, and I blogged about key observations that stood out among the sea of sessions, booths, and briefings. Check it out ⬇️ https://lnkd.in/gKeKGjvf
New #GRC report! Check out our latest "Buyer’s Guide: Governance, Risk, And Compliance Platforms, 2024" available to Forrester clients (link in comments).
The GRC Buyer's Guide highlights end users' priorities, experiences, and satisfaction with leading GRC platforms based on our survey of reference customers during the last Wave evaluation.
Key insights include: ✅ top GRC tech priorities ✅ key purchasing decision criteria ✅ GRC use case adoption journeys (my personal favorite!) ✅ customer satisfaction with GRC technical capabilities ✅ tech implementation timelines ✅ priorities for AI tech in GRC programs
📡 GRC programs look different in every organization and are shaped by unique processes, skillsets, mandates, and technology ecosystems. These factors impact their relative level of maturity, both within GRC domains (IT/cyber, TPRM, ERM, ORM, audit, etc.) and at scale across the enterprise.
🎯 Use this report to inform your strategy when selecting a GRC vendor or as a benchmark for your current vendor. Questions? Reach out!
