Sign In

Steve King, CISM, CISSP

Cybersecurity Marketing and Education Leader | CISM, Direct-to-Human Marketing, CyberTheory

Steve King was a prominent figure in the cybersecurity field, known for his extensive experience and leadership roles over a career spanning more than 25 years. He served as the Founding Board Member and Managing Director of CyberEd.io, a comprehensive cybersecurity education platform, where he was instrumental in developing innovative educational programs aimed at enhancing cybersecurity awareness and skills among professionals.12

Career Highlights

  • Cybersecurity Leadership: King held various senior positions including CIO, CTO, and CISO at several organizations, notably serving as CISO for Wells Fargo and CIO for Memorex. He co-founded the Cambridge Systems Group, which specialized in information security products for IBM mainframes.124
  • Entrepreneurship: He was a serial entrepreneur, founding multiple startups and raising significant venture capital throughout his career. His ventures included companies like Netswitch Technology Management and Endymion Systems.24
  • Education Advocate: At CyberEd.io, King focused on creating a high-touch learning environment with hands-on projects and extensive resources, aiming to transform how cybersecurity education is delivered. His approach emphasized understanding core principles rather than merely completing certifications.13
  • Publications and Thought Leadership: King authored two books on cybersecurity and contributed to various industry discussions as a member of the Forbes Technology Council. He was also involved in the CyberTheory Institute, promoting the Zero Trust security model.14

Personal Attributes

King was often described as a "great connector" within the cybersecurity community, known for his ability to foster relationships and mentor emerging leaders in the field. He was recognized for his passion for continuous learning and his critical approach to addressing cybersecurity challenges.15

Steve King passed away on June 27, 2024, but left behind a significant legacy through his contributions to cybersecurity education and his influence on industry practices.15

Highlights

Apr 13 · linkedin

Change Healthcare gets hit again.   After previously paying $22 million to ransomware hackers, Change Healthcare now faces a new threat. Another ransomware group has emerged, claiming to possess the company's stolen data and demanding payment. This group has provided samples of the alleged data, escalating the situation further.   For several months, Change Healthcare has been grappling with a severe ransomware crisis, severely impacting pharmacies and medical facilities across the U.S., inhibiting their ability to process claims. The situation has worsened due to internal conflicts among ransomware criminals.   In March, the group AlphV, after encrypting Change Healthcare’s systems and threatening to leak sensitive data, received a $22 million ransom. The transaction was tracked on the Bitcoin blockchain, suggesting the company likely complied with the demands.   Now, a new crisis looms as a different group, RansomHub, who claims to have 4 terabytes of stolen data from Change. This group, unaffiliated with AlphV, has threatened to auction the data to the highest bidder unless a ransom is paid.   RansomHub initially hesitated to provide proof but later sent screenshots of what appears to be patient information and contracts, indicating the seriousness of their claims. While these claims remain unconfirmed, the evidence presented raises significant concerns about the potential consequences of this second extortion attempt.   Change has stated that they are collaborating with law enforcement and experts to assess the situation, noting that their investigation is active and ongoing. Meanwhile, experts claim that trusting ransomware groups, even after payments, is risky. They highlight the unpredictability of cybercriminals’ actions, emphasizing the ongoing risks of data re-extortion.   It also gives some credence, we think, to our argument that the SEC 4-Day Rule acts as a sort secret decoder ring sending messages to the entire bad guy universe: "Material breach at 4 corners - send in the big guns". Why would we advertise that some improperly prepared enterprise was just breached 4 days ago when it would be impossible to either fix what caused that breach or make sure that all the other vulnerabilities across their enterprise were not equally at risk?   There’s a whole lot more than $22m at Change.   Shouldn't the bad guys have to do a little work themselves?   Let's get smarter.   https://cybered.io/ The Future. Now.

Oct 5 · linkedin

CyberEd.io kicks off the 20th annual Cybersecurity Awareness Month with a conference focusing on the impact of generative AI on Cybersecurity. The conference is a combined live and virtual event, hosted by CyberEd.io and our sister division, https://cyberedboard.io/, and is scheduled for Oct 24th at 9 am pacific.

This year’s theme, “The Smarter Summit,” is in keeping with CyberEd.io's tag line, "Let's Get Smarter" because we want to continue to emphasize the importance of keeping up with the transformational technologies impacting our world, like ChatGPT.

The cybersecurity landscape has evolved significantly in the last two decades, largely driven by advanced technologies, complexity, cloud, container, APIs, rogue code, increased nation state actor threats and the pressures to leverage the 4th industrial revolution. Our Master Class series addresses the impact of LLMs and GAI on Cyber from the perspectives of some of our industry's smartest thought leaders.

While Cybersecurity Awareness Month has played an important role throughout the years in shedding light on the need to up our game in Cyber, the result has been framed in minimal advances in security awareness training (SAT). We have spent over $60 Billion on this work in the last 10 years and still today, the cause of 95% of cyber-breaches can be traced back to human error. Just as it was 10 years ago.

We think we know why, and it is why we deliver our SAT in a managed services model where we meet with customers monthly and manage the SAT for them. That is accompanied by the why and the what clarifying every employee's understanding of their new roles in defending the fort, their homes and families, and themselves.

We now live in a total digital universe and there are no longer acceptable excuses for why we can't improve our digital literacy.

With the support of event partners including Google, Cisco, Broadcom, Zscaler, Exabeam and Orrick, Herrington, we have put together an informative and entertaining program on how AI is impacting cybersecurity and what we can expect in the future.

Please join us by registering now at our site, https://cybered.io/, and clicking the yellow "smarter summit" button on the upper right of our homepage. We expect a large crowd and we hope you are a part of it.

Many Thanks!

Related Questions

What inspired Steve King to start CyberEd.io?
How did Steve King's background in mathematical statistics and probability influence his career in cybersecurity?
What are some of the key achievements of Steve King in the cybersecurity industry?
How did Steve King's role at ISMG evolve over the years?
What makes CyberEd.io's approach to cybersecurity education unique?
Steve King, CISM, CISSP
Steve King, CISM, CISSP, photo 1
Steve King, CISM, CISSP, photo 2
Add to my network

Location

Fountain Hills, Arizona, United States