Panel of Experts
The members of our Panel of Experts have all provided commentary through anonymous interviews. If you wish to contact any of them, their email is included in most cases as part of their Expert Profile.
Page 1 of 6
Sort by
| Contributor | Area of Expertise | Company |
|---|---|---|
![]()
John Adams ( / Panel of Experts)John is a QSA-certified PCI assessor. In addition John provides remediation and security consulting... |
John is a QSA-certified PCI assessor. In addition John provides remediation and security consulting services to many large and midsize enterprises. Data Security and Compliance Auditing | Computer Task Group Computer Task Group is a data security consulting firm and certified PCI assessor |
![]()
Steve Alameda ( / Panel of Experts)Steve is an experienced security professional and a QSA - certified PCI assessor. He has provided a... |
Steve is an experienced security professional and a QSA - certified PCI assessor. He has provided assessment and remediation services to many Level 1 and Level 2 merchants. IT and Physical Security and Compliance Auditing | Data Safeguard Solutions Data Safeguard Solutions is an IT security consulting firm. |
![]()
Matt Alderman ( / Panel of Experts)Matt is responsible for Trustwave's compliance management services and is also an experienced securi... |
Matt is responsible for Trustwave's compliance management services and is also an experienced security professional who has worked with many leading corporations. IT Compliance and Risk Management | Trustwave Trustwave is the leading provider of on-demand data security and payment card industry compliance management solutions to businesses and organizations throughout the world. |
![]()
Chen Arbel ( / Panel of Experts)Chen Arbel joined Aladdin in 1997, and is the vice president of strategic deveolopment of its authen... |
Chen Arbel joined Aladdin in 1997, and is the vice president of strategic deveolopment of its authentication and software DRM solutions. He has more than 15 years of information security and digital rights management experience. Prior to joining Aladdin, Chen held a classified technology position for the Israeli government in North America and served as Captain for the Israeli Defense Force (IDF) where he gained extensive information security experience. User authentication and password management | Aladdin Aladdin is a leading provider of security services and solutions used to protect digital assets, enable secure business, and maximize the benefits from creating, selling, distributing and using digital content. |
![]()
Mark Baggett ( / Panel of Experts)Mark has been in the computer industry for 17 years. During his career Mark has held leadership posi... |
Mark has been in the computer industry for 17 years. During his career Mark has held leadership positions with software development teams, network and systems engineering teams and information security for large multinational companies such as Monsanto, NutraSweet, Morris Communications and others. Today as the CISO for Morris Communications, Mark is responsible for setting policy, compliance, strategy and all aspects of information security operations. He is responsible for the creation of the company incident response plan and leads the incident response team. Mark holds CISSP, GSEC Gold, GCIH Gold and MCSE certifications. Security and compliance management | Morris Communications Morris Communications is a media company with diversified holdings that include newspaper and magazine publishing, outdoor advertising, radio broadcasting, book publishing and online services. Today the Georgia-based enterprise reaches across the nation, has holdings in Europe and Asia and employs 6,000 people. |
![]()
Ed Bassett ( / Panel of Experts)Ed Bassett is responsible for helping CIBER clients secure their critical information assets, whethe... |
Ed Bassett is responsible for helping CIBER clients secure their critical information assets, whether it’s for ecommerce transactions, sensitive customer records, or classified military communication. Ed’s expertise is in state-of-the-art techniques for Internet and e-commerce security and systems design, such as application security, access control, authentication, encryption, network security, Public Key Infrastructure and security management practices. Ed possesses more than 20 years of experience as an information systems security architect. He has been the principal advisor to Fortune 500 and government clients on information systems security. Security Outsourcing and Third Party Management | Ciber CIBER is a leading international system integration consultancy with services for both private and government sector clients. CIBER’s services are offered on a project or strategic staffing basis, in both custom and enterprise resource planning (ERP) package environments, and across all technology platforms, operating systems and infrastructures. |
![]()
Deven Bhatt ( / Panel of Experts)Deven is the CSO at Airlines Reporting Corporation and is responsible for the PCI compliance program... |
Deven is the CSO at Airlines Reporting Corporation and is responsible for the PCI compliance program and overall security. Deven is also an experience public speaker. IT Security and Compliance Management | Airlines Reporting Corporation Airlines Reporting Corporation provides financial settlement solutions as well as data and analytical services to the travel industry. |
![]()
Bill Breyer ( / Panel of Experts)Bill is responsible for data security and compliance for Panera Bread a Level 1 chain of restaurants... |
Bill is responsible for data security and compliance for Panera Bread a Level 1 chain of restaurants. He is an experienced security professional and also manages field operations for the company. IT security management and compliance | Panera Bread Panera Bread is a specialty retailer, maker of bread products and operates a chain of hundreds of bakery cafes. |
![]()
Derek Brink ( / Panel of Experts)Derek Brink is a senior high-tech executive experienced in strategy development and execution, corpo... |
Derek Brink is a senior high-tech executive experienced in strategy development and execution, corporate / business development, and product management / product marketing. Before joining Aberdeen, Derek was RSA Security's vice president of strategy and corporate development, and was earlier the product line director for RSA SecurID. Information security market research | Aberdeen Group Aberdeen Group is a leading provider of fact-based research focused on the global technology-driven value chain. Aberdeen's research helps clients understand the measurable results being delivered by technology in business. |
![]()
Andrew Brooker ( / Panel of Experts)Andrew has over 10 years of IT experience and as a Certified Information Systems Security Profession... |
Andrew has over 10 years of IT experience and as a Certified Information Systems Security Professional, Andrew serves as the Manager of Information Protection Services at BHI Advanced Internet, Inc. In this role, Andrew is responsible for all aspects of PCI compliance including: security strategy, vulnerability scanning, remediation, security consultation, and threat assessment. Andrew has assisted a wide-range of clients - Fortune 500 to small restaurant organizations – in bringing their infrastructure and operations in compliance with PCI standards. Merchant security strategies & PCI compliance | BHI Advanced Internet BHI Advanced Internet, Inc. is the 18th largest Managed Service Provider (MSP) in the world. BHI provides the SecureConnect suite of managed network and security services focused on PCI compliance. BHI Advanced Internet, Inc. is a PCI Security Standards Council Approved Scanning Vendor (ASV) |
![]()
LeAnn Brown ( / Panel of Experts)LeAnn Brown joined RBS Lynk in 2006 as an Assistant Vice President and PCI Risk Manager. She manages... |
LeAnn Brown joined RBS Lynk in 2006 as an Assistant Vice President and PCI Risk Manager. She manages the company’s corporate PCI and payment application review programs and provides technical data security guidance to all customers and internal personnel. She also manages the integration partner process, including oversight of service provider registration and compliance. Prior to joining RBS Lynk, she managed First National Merchant Solutions’ PCI and PIN security program. LeAnn has 17 years experience as a Compliance Manager, an Information Systems Project Manager and as a Regulatory Risk Manager in the banking environment. She spent 12 years in the Air Force Air National Guard with 6 years as a Communications-Computer Systems Plans and Implementation Craftsman and 6 years as a Paralegal / Law Office Manager Craftsman. LeAnn earned a bachelor’s degree from the College of Saint Mary. She also earned two associate degrees: one in Computer Science and one in Paralegal Studies. Additionally, LeAnn served as Vice President for the American Behcet's Disease Association, a non-profit organization. PCI Compliance Reviews; Payment Risk Management | RBS WorldPay RBS WorldPay is the single card and non-card electronic payment processing solution that any business can rely on. From face-to-face transactions, to online and phone transactions where the cardholder is not present, we provide a service that is amongst the most effective, most secure ways to process payments. With 20 years experience at the forefront of the market, RBS WorldPay offers a global reach, backed by a network of customer service staff with local expertise. |
![]()
Cathy Bump ( / Panel of Experts)Cathy Bump oversees compliance with privacy and data security-related laws as well as with the group... |
Cathy Bump oversees compliance with privacy and data security-related laws as well as with the group’s Privacy Policies. She is responsible for Expedia’s implementation and maintenance of best practices in connection with privacy, works closely with Expedia’s Information Security Team to implement both internal and third party data safeguards, and also guides the shaping of Expedia’s positions on privacy issues and legislation. Prior to joining Expedia, Ms. Bump held the position of Vice President of Policy & Legal for TRUSTe, the leading online privacy standard-setting and seal organization. Ms. Bump holds a J.D. from Hastings College of the Law and a B.A. in political science from Stanford University. Legal and Regulatory Compliance Management | Expedia Expedia delivers consumers everything they need for researching, planning, and purchasing a whole trip. The company provides direct access to one of the broadest selections of travel products and services through its North American Web site, localized versions throughout Europe, and extensive partnerships in Asia. Serving many different consumer segments — from families booking a summer vacation to individuals arranging a quick weekend getaway, Expedia provides travelers with the ability to research, plan, and book their comprehensive travel needs. |
![]()
Ian Buxton ( / Panel of Experts)Ian’s responsibilities encompass all aspects of IT Risk Management, IT Compliance, Informatio... |
Ian’s responsibilities encompass all aspects of IT Risk Management, IT Compliance, Information Protection, & Technology Policy Development for Vail Resorts. Ian currently heads up the PCI Compliance efforts for Vail Resorts Management Company. Ian was previously in Ernst & Young’s Technology & Security Risk Services practices. IT risk and compliance management | Vail Resorts Vail Resorts, Inc. is a premier mountain resort company and a leader in luxury, destination-based travel at iconic locations. Our Company operates in three market segments: Mountain, Lodging and Real Estate Development |
![]()
Larry Byrns ( / Panel of Experts)Larry is an experienced PCI consultant who has provided remediation services and strategy consulting... |
Larry is an experienced PCI consultant who has provided remediation services and strategy consulting to many of the world's largest enterprises. Security Strategies & Compliance Management | IBM IBM is one of the largest global providers of technology and, among other things, business and technical security services. IBM's acquisition of ISS added many IT security professionals to its Global Technical Services Group, providing PCI consulting as well as PCI assessment services. |
![]()
Denise Chatam ( / Panel of Experts)Denise Chatam, D.B.A,. is Chief Security Officer and former Dean of Technology for Lone Star College... |
Denise Chatam, D.B.A,. is Chief Security Officer and former Dean of Technology for Lone Star College System in the Houston area. Dr. Chatam has more than 20 years of progressive IT leadership, auditing and compliance which include four years with Fiserv, eight years with IBM and nine years with Conoco. IT security management and compliance management | Lone Star College There are five colleges that comprise the Lone Star College System, which are located primarily in the North Houston metro area of Texas. Student enrollment is nearly 50,000. |
![]()
James Christiansen ( / Panel of Experts)James is the Chief Executive Officer of Evantix. Prior to forming Evantix, James was the CISO of bot... |
James is the Chief Executive Officer of Evantix. Prior to forming Evantix, James was the CISO of both Experian and General Motors. In addition, Under his direction, Visa developed the risk assessment framework, the CISP security standard (which became PCI DSS) when he was SVP of Information Security at Visa. Risk Management | Evantix Evantix an eBusiness Risk Management consulting firm that provides tools and services to help corporate clients manage their third party risk. |
![]()
Anton Chuvakin ( / Panel of Experts)Dr Anton Chuvakin is a recognized security expert and book author. His current role is Chief Logging... |
Dr Anton Chuvakin is a recognized security expert and book author. His current role is Chief Logging Evangelist with LogLogic, a log management company. He is an author and contributor to several security books including "Security Warrior", "Know Your Enemy II", "Information Security Management Handbook", "Hacker's Challenge 3" and "PCI Compliance." Chuvakin has also published numerous papers on security issues; he is also an active blogger (see www.securitywarrior.org) and frequent speaker at security conferences. . He participates in various security industry initiatives and standards organizations Security log management and log analysis | Qualys Qualys® offers on demand security audit and vulnerability management solutions to organizations of all sizes. The ultimate goal is to secure invaluable business platforms and mitigate risk. QualysGuard®, the company's flagship solution, is designed to secure networks, conduct automated security audits, and ensure compliance. |
![]()
Bryan Cline ( / Panel of Experts)Bryan S. Cline, CISA, CISM, CISSP-ISSEP, CPP, CAP, is the Director of IS Risk Management for The Chi... |
Bryan S. Cline, CISA, CISM, CISSP-ISSEP, CPP, CAP, is the Director of IS Risk Management for The Children’s Hospital of Philadelphia, Pennsylvania (USA), and former Technical Director of Information Assurance Services for QinetiQ North America Defense Solutions in Stafford, Virginia (USA). He has more than 25 years of experience in information systems, 10 years of which were in information systems security management and engineering in the DoD and NATO, and has spoken at several security and systems engineering conferences and symposiums, such as the DoD Cyber Crime Conference, Techno Forensics, Techno Security, and INCOSE's International Symposium. Bryan has authored two peer-reviewed papers, one on controls self-assessment and another on security engineering, and continues to write and conduct research in various areas within information security and compliance risk management. He holds a baccalaureate in mathematics, a masters degree in industrial engineering, and is completing his doctorate in information assurance. Bryan is also a member of several professional associations, including (ISC)2, ISACA, ASIS International, INCOSE, IEEE, and ACM; is a member of the INCOSE Systems Security Engineering Working Group; and is a founding member of the Philadelphia Chapter of the CSO Breakfast Club. IT Risk Management & Compliance | The Children’s Hospital of Philadelphia, PA The Children's Hospital of Philadelphia is one of the leading pediatric hospitals and research facilities in the world. Our 150 years of innovation and service to our patients, their families and our community reflect an ongoing commitment to exceptional patient care, training new generations of pediatric healthcare providers and pioneering significant research initiatives. |
![]()
Walter Conway ( / Panel of Experts)Walter manages PCI and other compliance events and works with the Treasury Institute, an association... |
Walter manages PCI and other compliance events and works with the Treasury Institute, an association of Treasury professionals in higher education. Walt spent over 10 years with Visa, and two years as president of an Internet-based payment processor. Payment Security, PCI Compliance and E-Commerce | Walter Conway Associates Walter's consulting business is focused on helping education institutions plan, implement, and manage their credit card and e-commerce programs. |
![]()
Sean Cordero ( / Panel of Experts)Sean is responsible for the PCI compliance program at Charlotte Russe a large retailer. Sean is als... |
Sean is responsible for the PCI compliance program at Charlotte Russe a large retailer. Sean is also an experienced security professional. Security and Compliance Management | Charlotte Russe Charlottle Russe is a specialty fashion retailer with nearly 400 stores. |






















