Federal and industry documents, including a peer-reviewed conference paper and procurement language adopted across the energy sector. Each link goes to the publishing organization, not to a copy hosted here.
Each of these is a public document. The links go to the publishing organization, not to copies hosted here.
I led the industry initiative to update the federal procurement language for energy delivery systems, convening asset owners, operators, vendors, and integrators to establish a baseline of minimum cybersecurity requirements that buyers could put directly into contracts. The premise was that security requirements arrive too late when they arrive after procurement.
Lead author of the conference paper presenting the procurement language work to the research community, with a co-author from Pacific Northwest National Laboratory.
View in the ACM Digital Library - DOI 10.1145/2602087.2602097
A cross-industry reference on workforce identity for financial institutions, covering the identity lifecycle from creation through privileged access management. Produced by a working group drawn from twelve member institutions. I led the group responsible for the privileged access management section and contributed to the wider document on behalf of Truist.
On the organizational seam where operational technology, corporate IT, and procurement meet - and why supply chain risk in critical infrastructure lives in that seam rather than inside any one of the three.