Contributors and References

MICHAEL O'NEIL

Lead Research Analyst - Cybersecurity

A frequent keynote speaker and author of several books and hundreds of reports, Michael is one of the world's most accomplished IT industry analysts. He brings a multifaceted understanding of how IT functions in a business context, as well as the ubiquitous requirement for effective security practices, to Stratascale's cybersecurity business.

Follow Michael on LinkedIn

JOSEPH KARPENKO

Lead Technical Advisor - Cybersecurity

Joe leads Stratascale's technical client security and risk strategy conversations, and provides guidance from market analysis and assessments focused on business, technical, and use case intelligence using practical experience and insights. 

Follow Joseph on LinkedIn

MICHAEL WILCOX

Chief Information Security Officer - Field

Michael acts as a peer and advisor to Stratascale’s executive-level cyber leaders to develop programs and centers of excellence for IT security services including forensics, incident response, education and awareness programs, vulnerability assessments, penetration testing, data loss prevention, enterprise information security architecture, compliance, encryption, identity and access management, and disaster recovery.

Follow Michael on LinkedIn

DENNIS ALLEN

Director of Security Programs, Strategy, and Risk

Dennis Allen is the director of security programs, strategy, and risk at Stratascale, where he helps organizations assess and improve their cybersecurity posture to address the ever-evolving cyber threat landscape. With more than 25 years of information technology and security experience, Dennis has helped fortune 500 companies, governmental agencies, the U.S. military, and many small businesses develop solutions to prevent, detect, and respond to advanced cyber challenges. He has also delivered numerous professional training classes, presented at industry conferences, and taught at both the undergraduate and graduate level. Follow Dennis on LinkedIn

ANDREW LEE

Principal Consultant–Security Programs and Strategy

With more than 25 years of experience in cybersecurity and IT audit, Andrew helps organizations understand and assess their security posture, maturity, and risks to their environment. He possesses a global perspective from his time serving in various industries across two continents.

Follow Andrew on LinkedIn

DEREK SHANK

Head of Research

Derek is head of research at Stratascale's Innovation Labs. Throughout his career—from academia to personal finance to IT research—he has focused on uncovering insights and helping people put those insights to good use. 

Follow Derek on LinkedIn

Works Cited

Aiyer, Bharath, et al. “The Unsolved Opportunities for Cybersecurity Providers.” McKinsey & Company, McKinsey & Company, 5 Jan. 2022, www.mckinsey.com/business-functions/risk-and-resilience/our-insights/the-unsolved-opportunities-for-cybersecurity-providers.

Andrews, Walter, et al. “Scrutiny Ratchets up of Companies' Cyber Insurance, Practices.” PropertyCasualty360, PropertyCasualty360, 18 Jan. 2022, www.propertycasualty360.com/2022/01/18/cyberattacks-lead-to-increased-scrutiny-how-can-companies-stay-ahead-of-the-curve-414-216174/.

Bevan, Oliver, et al. “International Personal-Data Transfer amid Regulatory Upheaval.” McKinsey & Company, McKinsey & Company, 3 Mar. 2021, www.mckinsey.com/business-functions/risk-and-resilience/our-insights/international-personal-data-transfer-amid-regulatory-upheaval.

Boehm, Jim, et al. “Enhanced Cyberrisk Reporting: Opening Doors to Risk-Based Cybersecurity.” McKinsey & Company, McKinsey & Company, 29 Jan. 2020, www.mckinsey.com/business-functions/risk-and-resilience/our-insights/enhanced-cyberrisk-reporting-opening-doors-to-risk-based-cybersecurity.

Boehm, Jim, et al. “The Risk-Based Approach to Cybersecurity.” McKinsey & Company, McKinsey & Company, 8 Oct. 2019, www.mckinsey.com/business-functions/risk-and-resilience/our-insights/the-risk-based-approach-to-cybersecurity.

“Data Protection Impact Assessments.” ICO, Information Commissioner's Office (UK), ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/accountability-and-governance/data-protection-impact-assessments/.

Works Cited

Hill, Michael. “Buying Cyber Insurance in 2021? Expect Greater Scrutiny, Higher Premiums.” CSO Online, CSO, 27 Apr. 2021, www.csoonline.com/article/3616595/buying-cyber-insurance-in-2021-expect-greater-scrutiny-higher-premiums-thanks-to-ransomware-supply.html.

Huang, Keman, et al. “Navigating Cybersecurity Risks in International Trade.” Harvard Business Review, Harvard Business Review, 2 Dec. 2021, hbr.org/2021/12/navigating-cybersecurity-risks-in-international-trade.

Kieran, Cillian. “Have Your Privacy Policies Kept up with Your Digital Transformation?” Harvard Business Review, Harvard Business Review, 29 June . 2020, hbr.org/2020/06/have-your-privacy-policies-kept-up-with-your-digital-transformation.

Korolov, Maria. “Enterprise Risk Management (ERM): Putting Cybersecurity Threats into a Business Context.” CSO Online, CSO, 11 Oct. 2018, www.csoonline.com/article/3311986/enterprise-risk-management-erm-putting-cybersecurity-threats-into-a-business-context.html.

Mandy, Claude, and Jeffrey Wheatman. “Security Fundamentals – The Services and Processes You Must Get Right.” Gartner Inc., 10 May 2021, www.gartner.com/document/3979567.

Mandy, Claude, and Jie Zhang. “Ten Cyber and IT Risk Fundamentals You Must Get Right.” Gartner Inc., 19 Oct. 2021, www.gartner.com/document/4007110.

Riddick, Stephen. “The SEC Is Serious About Cybersecurity. Is Your Company?” Harvard Business Review, Harvard Business Review, 8 Sept. 2021, hbr.org/2021/09/the-sec-is-serious-about-cybersecurity-is-your-company.

Willemsen, Bart, et al. “Predicts 2022: Privacy Risk Expands.” Gartner Inc., 27 Oct. 2021, www.gartner.com/document/4007581?ref=solrAll&refval=310319839.