# Clarity for security teams: when it matters most

IANS is the practitioner-sourced intelligence engine where data, peer experience, and expert insights converge.

Answers come from 170+ practicing security leaders.

Customized advice

Tailored to your industry and team size

No public AI has this data

Execution-ready outputs

Slides, vendor checklists, playbooks — 24/7

Consensus on patch priority Ask-an-Expert write-up Open

CVE volume and exploitation Peer data brief Open

KEV-first patch workflow Playbook and checklist Open

Request a faculty expert call

Right from within your AI tool

## The network behind security decisions

**170+**

experts

**10,000+**

research assets

**1,000+**

clients

**25 yrs**

advising security leaders

## How security teams use IANS

### IANS Intelligence

Get advice from people accountable for the same decisions you are

- [Ask-An-Expert Gain confidence in your security decisions with direct access to expert Faculty practitioners. Learn more](https://www.ians.com/ians-intelligence/ask-an-expert)
- [Executive Communications Access daily content that keeps you and the business response ready. Learn more](https://www.ians.com/ians-intelligence/executive-communications)
- [Vendor Assessment Community Access unbiased practitioner-based perspectives on vendors. Learn more](https://www.ians.com/ians-intelligence/vendor-assessment-community)
- [Tech Briefings Live guidance from faculty on breaking cybersecurity events, incidents and breaches. Learn more](https://www.ians.com/ians-intelligence/tech-briefings)
- [CISO Inquiry Submit questions to a private peer community and receive unique insights in shared summaries. Learn more](https://www.ians.com/ians-intelligence/ciso-inquiry-community)

[Explore IANS Intelligence](https://www.ians.com/ians-intelligence)

### Consulting

Uncover weaknesses and get real-world remediation to shore up your security program

- [Penetration Testing We act as an adversary to identify and exploit weaknesses in your controls. Learn more](https://www.ians.com/consulting/penetration-testing)
- [Red and Purple Teaming Adversary tactics demonstrated, with guidance to harden your infrastructure. Learn more](https://www.ians.com/consulting/purple-teaming)
- [Tabletop Exercises Find the gaps in your IR process, then test the plan against them. Learn more](https://www.ians.com/consulting/tabletop-exercises)
- [Cloud Security Assessments Assess organizational maturity across your cloud initiatives. Learn more](https://www.ians.com/consulting/cloud-security-assessments)
- [Security Program Assessments Measure the program against industry frameworks and set the strategy. Learn more](https://www.ians.com/consulting/security-program-assessments)
- [Keynote Speeches Delivered by IANS Faculty experts, rather than vendors. Learn more](https://www.ians.com/consulting/keynote-speeches)

[Explore Consulting Services](https://www.ians.com/consulting)

### Professional Development

Build your whole team, from hands-on technical skill to the executive table

- [Security Academy Instruction with hands-on interactive labs, in multiple formats. Learn more](https://www.ians.com/professional-development/security-academy)
- [Security Leadership Development A tailored program for aspiring leaders to hone their executive skillset. Learn more](https://www.ians.com/professional-development/security-leadership-development)
- [CISO Executive Coaching A personalized engagement with an executive coach from our Faculty line-up. Learn more](https://www.ians.com/professional-development/ciso-executive-coaching)

[Explore Professional Development](https://www.ians.com/professional-development)

## Everything IANS knows, inside the tools you already use

Vendor evaluations

Peer-sourced data

Practitioner conversations

Compliance mapping

Program guidance

Threat intelligence

Templates & tools

Proprietary research

News

MCP Server

IANS Platform

Tailored advice

Events

The IANS knowledge base, delivered via MCP into the AI tools your team already works in.

[Explore the IANS MCP Server](https://www.ians.com/mcp-server)

## Trusted by the world’s leading brands

- 
- 
- 
- 
- 
- 
- 
- 
- 
- 

> “IANS was like having another head. What you might have assigned somebody to go out and research… now that person consumes what IANS has and comes back with the strategy discussion about what to do next.”

CISO Medical Device Manufacturing

- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Aaron Turner

- Governance, Risk & Compliance
- Identity & Access / Zero Trust
- Vulnerability Management
- AI & Emerging Tech
- Network, Mobile & IoT

Aaron is a three-decade veteran of the cybersecurity community, having worked on projects covering every aspect of the industry, from helping build security technologies while at Microsoft to his work on offensive cyber projects for the U.S. government. He has spent the last 15 years on a series of cybersecurity startups, building technologies and developing companies to help teams solve some of the toughest cybersecurity problems.

[See full profile](https://www.ians.com/faculty/aaron-turner)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Allison Miller

- Application & Product Security
- Security Leadership & Strategy

Allison Miller is an internationally regarded industry expert and innovator in cybersecurity, fraud/anti-abuse, and payments technology, having spent the past 20 years scaling teams and technology that protect people and platforms. She has led major initiatives to engineer the defenses for core payment and e-commerce systems and deliver capabilities into key technologies that protect consumers from online threats, pioneering the development of real-time risk prevention and detection systems running at internet-scale.

[See full profile](https://www.ians.com/faculty/allison-miller)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Bill Dean

- Incident Response & Forensics
- Offensive Security / Red Team

Bill is a Shareholder at LBMC Information Security, where he is responsible for security assessments, incident response, digital forensics, electronic discovery and overall litigation support. He also serves as an expert witness in federal courts and numerous state courts and has conducted digital forensic investigations and electronic discovery services to support litigation efforts. He is also an active member of the International Society for Forensic Computer Examiners and Board Member in East Tennessee’s InfraGard Chapter.

[See full profile](https://www.ians.com/faculty/bill-dean)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Caleb Sima

- Application & Product Security
- Network, Mobile & IoT
- Security Leadership & Strategy

Caleb is the VP of Security at Databricks, a Unified Data Analytics Platform. Previously, he served as the Managing Vice President of Cyber Security at Capital One. Caleb has held many executive-level positions at information technology and security companies in addition to starting and running his own companies. Currently, he also serves as an Investor & Advisor to Pindrop Security.

[See full profile](https://www.ians.com/faculty/caleb-sima)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Chris Hetner

- Governance, Risk & Compliance
- AI & Emerging Tech
- Security Leadership & Strategy

Chris Hetner is a senior executive and board director specializing in cybersecurity, risk management, and regulatory compliance. He advises the NACD, chairs cybersecurity and privacy at Nasdaq, and serves on several boards and advisory roles, including MIT Sloan and Simulint. Formerly, he held leadership positions at the SEC, Moody’s, Marsh, EY, GE Capital, and Citi, and contributed to U.S. Treasury and Homeland Security initiatives. Hetner is recognized for elevating cyber risk and AI governance to executive and board levels, aligning cybersecurity strategies with business goals, and launching programs across public and private sectors.

[See full profile](https://www.ians.com/faculty/chris-hetner)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Corey Elinburg

- Cloud Security
- Network, Mobile & IoT
- Security Leadership & Strategy

Corey Elinburg serves as Field CTO at Obsidian Security, leveraging over 25 years of experience as a cybersecurity leader. Before joining Obsidian, Corey served as Chief Information Security Officer at CommonSpirit Health, the largest non-profit health system in the U.S. He brings a rich history of technical leadership at AWS, Microsoft, and Cisco.

[See full profile](https://www.ians.com/faculty/corey-elinburg)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### David Hazar

- Cloud Security
- Identity & Access / Zero Trust
- Application & Product Security
- DevSecOps
- Vulnerability Management

David is the founder and principal consultant of HazarDSec LLC and co-founder of Next Level3. He also provides cybersecurity consulting services and training as an author and instructor for the SANS Institute. With more than 20 years of technical experience, David has spent over 15 years helping organizations establish and implement security controls and practices.

[See full profile](https://www.ians.com/faculty/david-hazar)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Ed Skoudis

- Governance, Risk & Compliance
- Vulnerability Management
- Offensive Security / Red Team
- Security Leadership & Strategy

Ed Skoudis is the founder of Counter Hack, a company focused on conducting ultra high-quality penetration tests and red team engagements to help organizations better manage their cyber risks. Ed is a SANS Fellow, author, and instructor who has trained over 20,000 cyber security professionals in the art of penetration testing and incident response. Ed is an expert witness who is often called in to analyze large-scale breaches.

[See full profile](https://www.ians.com/faculty/ed-skoudis)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Francesco Cipollone

- Cloud Security
- Governance, Risk & Compliance
- Application & Product Security
- Vulnerability Management

Francesco is a seasoned entrepreneur, CEO of the Contextual-based vulnerability management platform from code to cloud Phoenix Security, author of several books on advanced networking, DevSecOps, Secure SDLC.

Francesco has been leading digital transformation in the Telecommunication sectors (Vodafone, BT, Telecom Italia) and Financial Sectors (Nationwide, HSBC) and leading public sector professional service for AWS Professional Service.

Francesco is also the host of multi-award Cyber Security & Cloud Podcast, a speaker and known in the cybersecurity industry and recognized for his visionary views. He currently serves in the board of UK&I of the Cloud Security Alliance, keynotes at global conferences and has authored and co-authored several books.

[See full profile](https://www.ians.com/faculty/francesco-cipollone)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Gunnar Peterson

- Identity & Access / Zero Trust
- Application & Product Security
- Detection & Security Operations

Gunnar is the CISO at Forter, a trust platform for digital commerce. Previously, he was chief security architect at Bank of America, a visiting scientist at the Software Engineering Institute at Carnegie Mellon, and a contributing analyst at Securosis.

[See full profile](https://www.ians.com/faculty/gunnar-peterson)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Idan Shoham

- Governance, Risk & Compliance
- Identity & Access / Zero Trust

Idan was one of the founders of M-Tech Information Technology, Inc. (acquired in 2008 and renamed Hitachi ID Systems). Idan led the product development and roadmap strategy and was responsible for customer services at M-Tech and subsequently Hitachi ID for 28 years. During his tenure, the company released password management automation software in 1996, user provisioning/IAM in 2002 and PAM in 2007. Idan has worked with many corporate, government and higher education customers worldwide to implement process automation, including IAM and PAM controls across their on-premises and cloud-hosted systems and applications.

[See full profile](https://www.ians.com/faculty/idan-shoham)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Jamie Williams

- Offensive Security / Red Team
- Detection & Security Operations

Jamie is currently a threat researcher at Palo Alto Networks Unit 42, where he helps lead tailored, tactical and strategic intelligence deliveries. Prior to Unit 42, Jamie was a cyber operations engineer for the MITRE Corporation where he led development of MITRE ATT&CK® for Enterprise and worked with amazing people on various other exciting efforts involving security operations and research, mostly focused on adversary emulation and behavior-based detections.

[See full profile](https://www.ians.com/faculty/jamie-williams)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Jason Witty

- Governance, Risk & Compliance
- Security Leadership & Strategy

Jason is the EVP and Chief Information Security Officer at Fidelity Investments. Formerly, he served as the Chief Security Officer at USAA and Global Chief Information Security Officer and CIO of the Cybersecurity & Technology Controls division at JPMorgan Chase. He is an experienced leader with both strong technical skills and wide-ranging risk management experience. Jason served as CISO at US Bancorp where he was responsible for enterprise-wide customer authentication products and provided accountability for all information security controls in the company. Prior to his role at US Bancorp, Jason was the Senior Vice President and Cyber Threat Prevention Services Executive at Bank of America and led a team who provided global information security risk prevention and deterrence services.

[See full profile](https://www.ians.com/faculty/jason-witty)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Jodi Daniels

- Incident Response & Forensics
- Privacy & Data Protection

Jodi Daniels is a Founder and CEO of Red Clover Advisors, a privacy consultancy, that integrates data privacy strategy and compliance into a flexible, scalable approach that simplifies complex privacy challenges. A Certified Information Privacy Professional, Jodi brings over 27 years of experience in privacy, marketing, strategy, and finance across diverse sectors, working and supporting startups to Fortune 500 companies.

Jodi Daniels is a national keynote speaker, host of the top ranked She Said Privacy/He Said Security Podcast and WSJ best-selling author of Data Reimagined: Building Trust One Byte at a Time, and also has been featured in The Economist, WSJ, Forbes, Inc. and more. Jodi holds an MBA and a BBA from Emory University’s Goizueta Business School.

[See full profile](https://www.ians.com/faculty/jodi-daniels)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Jon Stone

- AI & Emerging Tech
- Governance, Risk & Compliance
- Cloud Security

Jon Stone is a product and technology executive with over 25 years leading cybersecurity and SaaS platforms in regulated industries, particularly healthcare. As Chief Product Officer at Clearwater, he co-founded and scaled the IRM|Pro™ platform to 300+ enterprise clients, delivering cybersecurity, risk management, and compliance solutions. He is a named inventor on multiple U.S. patents in machine learning and has applied AI-driven risk scoring to improve decision-making and enterprise risk visibility. Jon’s work spans AI governance and core cybersecurity domains, including risk analysis, security architecture, cloud governance, and regulatory compliance. He also serves as an instructor in the University of Texas at Austin’s Leadership in Healthcare Cyber Risk Management program, teaching enterprise risk analysis and governance in regulated environments.

[See full profile](https://www.ians.com/faculty/jon-stone)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Joshua Corman

- Application & Product Security
- DevSecOps
- Detection & Security Operations
- Network, Mobile & IoT
- Security Leadership & Strategy

Josh is the Chief Security Officer and SVP at PTC, a global computer software and services company that provides CAD modeling, Internet of Things, and Augmented Reality software products. He is also a Co-Founder of @IamTheCavalry and @RuggedSoftware to encourage new security approaches in response to the world’s increasing dependence on digital infrastructure. Additionally, Josh serves as an adjunct faculty for Carnegie Mellon’s Heinz College.

[See full profile](https://www.ians.com/faculty/joshua-corman)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Justin Elze

- Offensive Security / Red Team
- Network, Mobile & IoT
- Security Awareness & Human Risk

Justin Elze is currently serving as Chief Technology Officer at TrustedSec. Over Justin’s seven years with TrustedSec, as an information security expert, he has used his vast expertise in enterprise penetration testing, network security, social engineering, and red teaming to identify his clients’ vulnerabilities and ultimately, protect their technology infrastructure. Prior to becoming CTO, Justin held the roles of Director of Innovation, Research, and Advanced Testing and Principal Security Consultant for TrustedSec.

[See full profile](https://www.ians.com/faculty/justin-elze)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Katrina Rodzon

- Security Leadership & Strategy
- Security Awareness & Human Risk

Katrina is a Product Manager at a pharmaceutical company in Salt Lake City and an independent Behavior Design, Methodology, and Analytics Expert. She has applied her diverse set of skills to creating, implementing and evaluating innovative security awareness programs for Fortune 100 companies. Likewise, she has assisted in creating effective social engineering tools and testing scenarios for penetration testing teams. Katrina also has experience managing curriculum strategy and content development in psychology to information technology for both online and live instruction.

[See full profile](https://www.ians.com/faculty/katrina-rodzon)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Kevin Tackett

- Application & Product Security
- Offensive Security / Red Team

Kevin is the Founder, CEO, and Principal Security Consultant of Secure Ideas, an information security consulting company that focuses on penetration testing services and training. He is also a founder and contributor of many open source projects including the Samurai Web Testing Framework (SamuraiWTF), a web penetration testing and training environment, and the Basic Analysis and Security Engine (BASE) project, a web front-end for Snort Analysis.

[See full profile](https://www.ians.com/faculty/kevin-tackett)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Lynda Grindstaff

- Incident Response & Forensics
- Security Leadership & Strategy

Lynda Grindstaff has 30 years’ experience as a technology and cybersecurity engineering executive, public board director and strategic advisor for growth companies. Most recently, Lynda was a VP of engineering at McAfee, where she led the global malware operations teams. In addition to protecting customers, she provided incident response and drove efficiencies across the company. Prior to McAfee, Lynda spent 22 years at Intel in various technical and senior leadership roles. She is known for being a passionate and inspirational leader who excels in driving innovation and efficient cybersecurity solutions.

[See full profile](https://www.ians.com/faculty/lynda-grindstaff)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Michael Pinch

- Cloud Security
- Governance, Risk & Compliance
- AI & Emerging Tech
- Detection & Security Operations
- Security Leadership & Strategy

Mike is the Chief Technology Officer at Security Risk Advisors, an information security advisory and SOC services firm. With over a decade of healthcare C-level experience, Mike has overseen and managed software development, SOC, and innovation groups in the information security realm. He has had the unique experience of fulfilling CISO and CTO roles in the healthcare payer, provider, and medical device manufacturer spaces. Mike is also a Microsoft MVP, with a focus on AI in Cyber Security.

[See full profile](https://www.ians.com/faculty/michael-pinch)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Mike Webber

- Security Leadership & Strategy

Currently consulting, Mike was the head of cyber security at 2 of Canada’s iconic companies, and also served as CIO at one of them. Mike’s scope included security of application development, of IT systems, and of global cloud services, as well as compliance for the corporation and customer services.

[See full profile](https://www.ians.com/faculty/mike-webber)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Olivia Rose

- Governance, Risk & Compliance
- Security Leadership & Strategy

Olivia is an industry veteran and proven executive leader with over 21 years experience building, transforming, and delivering successful IT and cybersecurity programs. Olivia possesses a rare blend of technical, governance, and business acumen to easily articulate cybersecurity strategy and initiatives to both C-Suite/Board of Directors and technical audiences. Olivia is presently the Chief Information Security Officer (CISO) and VP of IT & Security at a fast-growing SaaS company, and a frequently requested speaker on cybersecurity at events and on podcasts. Olivia is also widely regarded as a mentor and thought leader in the industry and as champion for diversity and equality.

[See full profile](https://www.ians.com/faculty/olivia-rose)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Rachel Bierner

- Cloud Security
- Governance, Risk & Compliance
- Security Leadership & Strategy

Rachel Bierner is the Co-founder and CEO of Qubric Security, a cybersecurity consulting firm that enables secure organizational growth and resilience for its clients. She has held leadership roles in cloud security, cybersecurity strategic planning, technology delivery, and operations at two of the top three U.S. financial institutions. She also served as a management consultant at a “big 4” global consulting firm, where she led software configuration and development teams for clients that ranged from technology start-ups to multinational enterprises.

[See full profile](https://www.ians.com/faculty/rachel-bierner)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Rob Teague

- Governance, Risk & Compliance
- Incident Response & Forensics
- Detection & Security Operations
- Security Leadership & Strategy

Robert is the Director of CMMC Services and a certified Cybersecurity Maturity Model Certification Assessor (CMMC CCA) & Certified CMMC Professional (CCP) for Redspin, a CMMC Third-Party Assessor Organization (C3PAO). He supervises a team of CCAs that provide consulting services and certification assessments for Government contracting organizations seeking level 2 CMMC certifications.

[See full profile](https://www.ians.com/faculty/rob-teague)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Russell Okoth

- Governance, Risk & Compliance
- Incident Response & Forensics
- Vulnerability Management
- Privacy & Data Protection
- Security Leadership & Strategy

Russell Okoth is a Business & Technology Executive. He is the Founder and Consultant at Cyberdiligent, a Dallas-based Information Security Governance and Risk Advisory firm, where he provides strategic guidance to Boards, C-suites, and Executives. Russell has over twenty years of experience in information security, cybersecurity, risk management, and regulatory compliance across technology, retail, telecommunications, finance, insurance, and fintech industries. Russell has held notable leadership roles, including Chief Information Security Officer (CISO) and Data Privacy Officer at Pacific Premier Bank and CISO at Apex Fintech Solutions.

[See full profile](https://www.ians.com/faculty/russell-okoth)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Shannon Lietz

- Cloud Security
- DevSecOps
- Offensive Security / Red Team
- Security Leadership & Strategy

Shannon is the Founder and CEO of ThirdScore. This followed her role as VP, Security at Adobe, where she led Product and Software Security. Shannon is also the Founder of DevSecOps, a non-profit organization committed to uniting security with DevOps and Agile practices via experimentation and education. Shannon is an award-winning security innovator and leader experienced in developing emerging security programs for Fortune 500 companies including Intuit, ServiceNow, Sony, Sempra, Savvis, Cable & Wireless, 99 Cents Only, Exodus, and Bank of America.

[See full profile](https://www.ians.com/faculty/shannon-lietz)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Steven Martano

- Network, Mobile & IoT
- Security Leadership & Strategy

Steve is a partner in Artico Search’s cybersecurity practice. He is an expert in security executive recruiting and compensation focused on recruiting best-in-class CISOs and their teams across various industries. He leads strategic partnerships and initiatives including Artico’s annual CISO compensation & budget survey conducted in collaboration with IANS. Prior to Artico, Steve served in Caldwell Partners’ cybersecurity practice and at Russell Reynolds Associates.

[See full profile](https://www.ians.com/faculty/steven-martano)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Todd Inskeep

- Governance, Risk & Compliance
- Identity & Access / Zero Trust
- Incident Response & Forensics
- AI & Emerging Tech
- Network, Mobile & IoT
- Security Leadership & Strategy

Todd Inskeep is CEO of Incovate Solutions and hands-on advisor to CISOs, CIOs, and business leaders. He brings 25+ years of cybersecurity & innovation at NSA, Bank of America, Booz Allen, & more. Todd built one of the first consumer banking MFA programs, managed major ransomware recovery efforts in healthcare, and routinely advises clients on building programs to meet NIST CSF, HIPAA, and cyber insurance needs. He’s led projects on identity & access management, risk quantification, incident response, plus program assessment and maturity. He serves as a fractional CISO across industries, currently building out AI governance programs.

[See full profile](https://www.ians.com/faculty/todd-inskeep)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

### Wolfgang Goerlich

- Identity & Access / Zero Trust

J. Wolfgang Goerlich is a CISO in the public sector. Prior to this role, he led IT and IT security in the healthcare, financial services, and tech verticals. Wolfgang has held senior positions at several consulting firms, leading security advisory and assessment practices. He is a strong presence in the security community, contributing to the establishment and organization of multiple groups and events. Wolfgang focuses on strategy, governance, identity and access management, and resilience.

[See full profile](https://www.ians.com/faculty/wolfgang-goerlich)

- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 
- 

## The Faculty behind the intelligence

170+ working CISOs, architects, and incident responders — currently running the programs our clients are building. Every IANS answer traces back to one of them.

[Meet all faculty](https://www.ians.com/faculty)

[Close, by clicking outside the panel](https://www.ians.com/#_)

[Close](https://www.ians.com/#_)

[See full profile](https://www.ians.com/faculty)

## Meet with peers

A key pillar of the IANS experience is attending one of our signature in-person and virtual events, across several formats. IANS events are designed to provide the breadth and depth of information CISOs and their teams need to get ahead.

[Explore all events](https://www.ians.com/events)

- [Forums One-day events with keynotes, breakouts, and networking. Explore Forums](https://www.ians.com/events/forums)
- [CISO Roundtables One-day sessions for CISOs to share insights confidentially. Explore CISO Roundtables](https://www.ians.com/events/roundtables)
- [Insight Exchanges Half-day peer exchanges with faculty, zero vendors in the room. Explore Insight Exchanges](https://www.ians.com/events/insight-exchanges)
- [Virtual Symposiums 2.5-hour deep dives on technical and operational topics. Explore Virtual Symposiums](https://www.ians.com/events/symposiums)
- [Webinars Hour-long discussions on hot topics in cybersecurity. Explore Webinars](https://www.ians.com/events/webinars)

## News and Faculty recommendations

[See all news](https://www.ians.com/news)

[Latest news Years After Ransomware Recovery Red Flags, MonsterCloud Owner Faces Fraud Charge MonsterCloud owner Zohar Pinhasi faces wire fraud charges for allegedly paying ransomware actors while claiming his company recovered data without paying. Maria José Membreño Oct 23, 2026 Read now](https://www.ians.com/news/years-after-ransomware-recovery-red-flags-monstercloud-owner-faces-fraud-charge) [eMudhra Key Failure Shows the Fragility of Certificate Trust Weak eMudhra CA keys went undetected for 18 months and two independent audits, prompting Google, Mozilla, Apple, and Microsoft to block the affected keys. Tim McCarthy Oct 22, 2026 Read now](https://www.ians.com/news/emudhra-key-failure-shows-the-fragility-of-certificate-trust) [OpenAI Agents Disabled Their Own Monitoring During Coding Tasks OpenAI disclosed that agents powered by two of its models disabled their own monitoring during coding tasks, and one agent falsely told the user it had not. Emily Dempsey Oct 21, 2026 Read now](https://www.ians.com/news/openai-agents-disabled-their-own-monitoring-during-coding-tasks) [Bank of America Hires 1,000 Contractors to Patch AI-Discovered Flaws Bank of America hired 1,000 security contractors to work alongside its 3,000 IT staff and patch vulnerabilities that frontier AI models like Mythos uncovered. Tim McCarthy Oct 20, 2026 Read now](https://www.ians.com/news/bank-of-america-hires-1-000-contractors-to-patch-ai-discovered-flaws) [ConnectWise Disables Backup Services After Microsoft 365 Breaches ConnectWise shut down three cloud services, including Cloud Backup, after attackers used compromised app credentials to access customers’ Microsoft 365 tenants. Emily Dempsey Oct 19, 2026 Read now](https://www.ians.com/news/connectwise-disables-backup-services-after-microsoft-365-breaches)

## The best security decisions aren't made alone

[Talk to IANS](https://www.ians.com/contact)