Security Management Strategies for the CIO
-
Ernest N. Hayden (Ernie), CISSP, CEH, is managing principal, critical infrastructure protection/cybersecurity with Verizon. He has extensive experience in the power utility industry, critical infrastructure protection/information security, cybercrime and cyberwarfare. His primary focus is on supporting customer projects regarding smart grid security, energy supply security, and electric grid security with special emphasis on NERC Critical Infrastructure Protection (CIP) standards. Ernie is a noted writer and speaker on the topic of smart grid security.
Prior to joining Verizon, Ernie was the information security strategic advisor in the compliance office at Seattle City Light. Ernie was also the chief information security officer for the Port of Seattle, one of the nation's largest combined airport and seaport operations.
Previously Ernie held several significant management positions in both the business management and the information security management arenas. He was president and CEO of Bellevue, Wash.-based MCM Enterprise, an advanced sensor technology company for the hydroelectric sector; he was IT security lead for the Seattle Justice Information System in the Seattle Municipal Courts and Seattle Police Department; he was director of security services for Alstom ESCA software; executive director for the Electric Power Research Institute (EPRI) covering Western U.S. and Canadian operations; and commissioned officer in the US Navy qualified as a nuclear engineer and surface warfare officer.
-
Do you have a question for our experts?
Contributions from Ernie Hayden, Contributor
- South Carolina breach: A lesson in security alignment
- Data breach protection requires new barriers
- How to retain good infosec employees
- How CISOs can fill security positions
- Why CISOs must adopt a new mentality to protect data
- Understanding 'big data' security issues
- Video Ask the Expert: Why security conscience matters
- Why having a CISO can reduce data breach costs
- Awareness training for executives: How to get started
- Why CISOs must actively engage management on security
- How security teams can spot high-risk employees
- How to manage information security legal issues
- Which is best: Certification or an IT security degree?
- Thwarting a hacktivist: Avoid sociopolitical attacks
- Cybersecurity insurance: Choosing an insurance policy
- Understanding SCAP NIST guidance and using SCAP tools t
- Best practices for information security reward incentive programs
- HIPAA covered entity and business associate agreement r
- Creating a security risk management plan format
- How to manage compliance as Chief Information Security