Suggestions
Jill Ratkevic
Founder @ Black Swans | Silicon Valley's Top Strategist | Leader of Open Source Software Movement
Jill Ratkevic is a seasoned professional with over 25 years of experience in moving people and companies forward. With a keen eye for simplifying complexities, she serves as a trusted advisor to executives and excels in crisis management. Jill has a track record of building award-winning communications teams that consistently surpass expectations. She is recognized in the industry for her strategic counsel, leadership, and brand-building expertise.
As an 'angel' who shapes brands, Jill has played a pivotal role in scaling Y Combinator from Boston to California, working with over 200 companies in various sectors such as VCs, SaaS, Developer, Robotics, Space, and Silicon. Her background includes contributions to notable publications like ZDNet, LinuxDevices, and Forbes, showcasing her profound insights and thought leadership. Additionally, she has been instrumental in taking several tech giants from inception to success, including GitLab, Heroku (Salesforce), New Relic, Meteor, Cloudant (IBM), and pioneering the launch of early DevOps companies like CircleCI.
Throughout her career, Jill has held prominent communication roles at leading organizations such as Salesforce, MuleSoft (Salesforce), FACEBOOK's Wit.ai, LogLogic (TIBCO), Sun Microsystems, AMD, BEA (Oracle), Heavybit, Zencoder (Brightcove), LexisNexis, and more. Her expertise in cultivating brands and fostering innovation has earned her the reputation of being the 'startup whisperer' in Silicon Valley, guiding companies from securing funding to scaling operations effectively.
Jill Ratkevic's educational background includes studies in Business/Corporate Communications at Boston University and Rutgers University. She has also been actively involved in various organizations, having served on the Board of Directors at the Linux Professional Institute (LPI), founded Black Swans at Black Swans, and held key positions at renowned companies like LogLogic, Bite Communications, Ziff Davis, MontaVista Software, and Abbott.
For more information, you can reach out to Jill Ratkevic via Twitter (@blackswansmedia.com) or visit her website at www.blackswansmedia.com. Contact via email can be made to [email protected].
Highlights
Sunrise. Sunset?
A few years ago no one would go on record on the kickback schemes CIOs/CISOs had going for a decade+. The venerable security analyst Brian Krebs helped put an eye on the details amid growing investigation, tagging CTech by Calcalist's expose from Sophie Shulman and Meir Orbach.
The Calcalist כלכליסט's story (below) came on the heels of Cyberstarts own interview in Bloomberg from Marissa Newman in May where Cyberstarts founders bragged on $1.5 billion in acquisitions, touted their portfolio companies had raised $1.8 billion in past three months and boasted a 170% annual return on their first fund.
From the story: "Four Cyberstarts companies were bought since the beginning of 2023 for a combined $1.5 billion, including cloud security company Axis, which was bought by Hewlett Packard Enterprise last March and app security platform Bionic, acquired by Crowdstrike, Inc. last September." (via Bloomberg)
Looks like it's sunset on the 'Sunrise' program and other schemes as regulators investigating the names and firms engaging in some quid pro quo. To be fair, all funds talk with expert CIOs/CISOs but the link to the sale is no surprise where the trouble lies and it is unravelling. It is not just security either. Tip offs to these player? They launch their own ecosystem play, share customers, "farm" ecosystems by allowing startups to use their product "free" (if they have funding from someone they have on their target list), funded their seed round from their very own VC fund and then boast boast away.
I haven't worked one of the Ra'anan companies in a long time as VCs have been steering clear. When he was at Sequoia Capital I did a few companies they took us out, we ran up the sales logos and two were acquired. Ra'anan always had the good questions and challenged us (in a good way) back then. The quote below sums up why the security execs taking the money are the same ones we should not have securing our data.
"We have reached a situation where #CISOs who receive requests for consulting immediately ask what reward mechanism the fund provides," says a senior official in the Israeli cyber industry.
From where I sit knowing we were warned again TODAY on an Open Source maintainer and two security consultants who are not real and - not a shocker - state sponsored hackers. Expect lots of changes coming.
Our software supply chain is heinously broken and more of these stories are on the way.
(CC image rights 20017) #SBOM #security #OpenSource #vc
"Just as a heart surgeon should not be hired to perform brain surgery, the head of cybersecurity for the largest health care company in the world should not be someone’s first cybersecurity job." ( https://lnkd.in/gMRFt4Zu )
The SEC found the United Healthcare cyberattack could have been prevented had the company employed a skilled CISO and followed industry best practices and standards.
The rules for starting a security company and providing cybersecurity services to U.S. companies are clearer as the SEC is enforcing compliance in the face of a record number of cybersecurity attacks.
The "2023 Global CISO Survey" from Heidrick & Struggles lays bare the risk to CISOs, finding 38% of CISOs are not covered by their organizations' D&O insurance, and another 18% do not know whether they are covered. Additionally, 55% of respondents said they are not covered by a severance package."
Enforcement is up. Following last year's SolarWinds breach, the #SEC noted "stark inconsistencies between SolarWinds' public cybersecurity statements and its internal risk assessments, with [CISO] Brown at the center of these discrepancies. Evidence suggests that Brown was aware of these security weaknesses but did not take sufficient measures to rectify them. This led to a distorted portrayal of the company's cybersecurity stance to investors SolarWinds Corporation’s #CISO, underscore how seriously the SEC takes timely and accurate disclosure of cybersecurity incidents." This was the first time that the SEC has launched an enforcement action against an information security executive over their role in a company’s allegedly inadequate disclosures.
The pattern we have seen with the SEC dating back to the aughts has been more compliance and scrutiny. Back then CFOs were at the center of the firestorm as financial disclosures and breaches and held them personally liable. By 2022 the SEC tightened rules further and publicly traded companies had to establish policies to claw-back executive compensation.
The rule? Companies must include a 'look-back window' to encompass any incentive-based compensation awarded for 3 years before the restatement. Failure to do this means risking "criminal penalties, civil penalties and de-listing from the exchange on which they trade."
The SEC reported that they have increased accounting and auditing enforcement actions by 22% in 2023. The size of monetary fines declined 7% from the prior fiscal year and were 47% lower than the average of total monetary settlements in the prior 5 fiscal years. At the same time the SEC issued non-monetary sanctions against "50% of individual respondents who settled in FY 2023 including he percentage of initiated actions referring to an announced restatement and material weakness in internal control (31%) reached its highest level in recent years according to Cornerstone Research. (https://lnkd.in/gBWKZYUH )
Cybersecurity is finally at the top of the agenda - and with teeth.

