Sign In

Don Baham

CISO | Security Tinkerer | Board Member |🚫I don’t buy stuff here🚫

Professional Background

Don Baham is a distinguished chief information security officer (CISO) and security technologist with over 20 years of robust experience in the realm of information security leadership within enterprise IT environments. Respected by peers and executive leadership alike, Don serves as a pivotal advisor, shedding light on critical information security matters that shape strategic organizational decisions. His expertise lies in the comprehensive planning and development of enterprise information cybersecurity strategies, complemented by best practices essential for reinforcing the information security architecture that organizations rely upon.

With a focus on data integrity, availability, confidentiality, accountability, and assurance, Don has established himself as a subject matter expert to the Board of Directors and Executive Management within his organizations. His role encompasses overseeing IT Information Security, where he diligently recommends and prioritizes investments designed to mitigate cybersecurity risks and strengthen organizational defenses. Don’s extensive experience enables him to drive efforts that not only protect vital data but also enhance overall business value.

Education and Achievements

Don Baham earned his Bachelor of Science degree in IT Network Design & Management from Western Governors University, a regionally accredited online university that specializes in providing high-quality education to help working adults advance in their careers. This foundational knowledge has been instrumental in shaping his career and establishing his insights into the effectiveness of information security systems in today's complex technological landscape.

Throughout his career, Don has held numerous consequential positions, including:

  • Chief Information Security Officer at Germantown Technologies
  • Senior Director/Information Security Officer (CISO) at Accume Partners
  • President at Kraft Technology Group
  • Director of Client Services at D+H U.S. Operations

In these roles, Don has demonstrated his ability to lead by example, fostering security cultures within organizations and contributing significantly to the advancement of cybersecurity practices.

Notable Organizational Engagements

In addition to his professional roles, Don has been actively involved in various organizations, highlighting his commitment to the cybersecurity community. He formerly served as the Chair of the InfoSec Nashville Conference at the ISSA - Middle Tennessee Chapter, where he played a key role in promoting the exchange of knowledge and best practices among information security professionals.

Don has also shared his expertise as a member of several prestigious organizations, including:

  • Information Security Leadership Foundation
  • CISO ExecNet
  • The CISO Society
  • SANS CISO Network

As an adjunct faculty instructor and guest lecturer at Belmont University, Don has contributed to educating the next generation of cybersecurity professionals. His role on the Advisory Board at Belmont University's Jack C. Massey College of Business underscores his commitment to developing academic programs that align with industry standards and requirements.

Commitment to Security Frameworks and Governance

Don has demonstrated excellence in navigating complex compliance and security frameworks, including NIST 800-53, NIST Cybersecurity Framework, FFIEC, GLBA, HIPAA, HITRUST, SOC2, and NYDFS. His in-depth understanding of these regulations aids organizations in adhering to necessary compliance measures while also bolstering their overall security posture.

Community Involvement and Training Initiatives

As an active member of the Cybersecurity Collaboration Forum Leadership Board in Nashville, Don collaborates with a variety of stakeholders to bolster the region's cybersecurity initiatives. He has also been involved with various training programs, speaking engagements, and workshops, showcasing his dedication to educating others about information security best practices.

In various capacities, including his role as a speaker and trainer, Don has made significant contributions to transforming the security landscape, fostering a deeper understanding of cybersecurity principles among professionals. His work emphasizes language surrounding continuous security monitoring, incident response, risk management, and secure software development—all critical to a thriving organizational security framework.

Core Competencies and Skills

Some of Don Baham's core competencies encompass:

  • Continuous Security Monitoring
  • Cross-Functional Collaboration
  • Enterprise Information Security Policy
  • Data Loss Prevention
  • Vulnerability Management
  • Digital Transformation

These competencies, among others, demonstrate a comprehensive understanding of the intricacies involved in managing cybersecurity in a dynamic business environment. Don is known for his excellent written and verbal communication abilities, which are vital in articulating complex security issues to diverse audiences, including executive leadership and technical staff.

By utilizing his influencing skills and expertise in project management, Don has navigated the complexities of securing enterprise-level infrastructures while ensuring a seamless alignment with business goals and objectives.

Conclusion

Don Baham stands as a leader the field of information security, possessing a rich background and diverse skill set tailored to the evolving needs of enterprises today. His unwavering commitment to advancing cybersecurity practices and educating others in the field has solidified his reputation as a trusted expert and innovator. As both a devoted husband and father, he balances a thriving career with a fulfilling personal life, making a significant impact on those around him.

Related Questions

How did Don Baham develop his extensive knowledge in information security leadership?
What strategies has Don implemented to enhance cybersecurity within organizations?
Can Don Baham share examples of how he influenced executive leadership on information security matters?
In what ways has Don contributed to the education of future cybersecurity professionals as an adjunct faculty instructor?
What best practices for cybersecurity does Don recommend based on his years of experience?
Don Baham
Add to my network

Location

Nashville Metropolitan Area