Also known as: rjbrown99
My name is Robert Brown, and I am a professional communicator. That's not my job title - it's Director of Information Security - but that doesn't really illustrate what I do. Sure, I understand all about COSO, COBIT, the ISO security standards, GLBA, SOX, NCUA's Part 748, FFIEC guidance, and the like. But how many of us actually speak in acronyms - especially the non-technology oriented business units? And more importantly, how do those acronyms translate to actually making a meaningful difference in reducing the operational security risks to my organization? For me, the answer is understanding the business and its associated risks, communicating them in a way that the rest of the organization can also understand them, helping to facilitate sound decision-making, making sure our resources are focused on reducing the areas of highest risk, and most importantly motivating my team to do the same. I am passionate about technology and security, thoroughly enjoy public speaking and writing, and welcome contact or questions from my professional network. Thanks for taking the time to read my profile.
