Teaming Up Against Exposure

Having focused the last decade on Exposure Management, I can’t help but feel we are in unprecedented times. The moment we’re trying to meet is an impending future marked by an explosion in the scale, velocity, and complexity of exploitation. Meeting this moment requires focusing on the core values of exposure reduction—which is why I am truly honored to join Empirical Security as Head of Platform.

As we all seek to rally around what matters most in Exposure Management, I could not have more faith in the team assembled here to provide fundamentally sound capabilities that will empower the industry. My new role centers on you—the Exposure Management practitioner or leader. By focusing on your needs and goals matched with the competency of the Empirical team, I am confident we can meet this moment together.

A Vision for Exposure Reduction

In partnering with hundreds of organizations to mature their security practices, I’ve seen first-hand how challenging it is managing exposure as well as how much organizations ask of Exposure Management professionals. This trend will undoubtedly continue as the industry grapples the concerns brought upon by frontier models and their associated threats.

The answer to today’s exposure concerns lies in having certainty in the reality of exposure and using that certainty as a foundation for informed exposure reduction. What attracted me to Empirical was the deep acumen and rigor this organization brings in pursuing exposure certainty.

Function Over Features

Managing exposure isn’t the byproduct of an assortment of features, but rather comes from the functions of an Exposure Management practice. As Chair of the Open Exposure Management Framework (OEMF) I have been seeking functionality across the security landscape that could be used to actualize the best practices we design within the technical committee. Unfortunately, the collection of features available in the market today is inadequate in operationalizing emerging best practices.

This is why I am joining Empirical—I know this organization is uniquely capable of delivering true Exposure Management capabilities that promote the functions of our programs rather than some arbitrary collection of features.

As I take on this new role, let me be your voice. I’d love to opportunity to sit down and hear more about what challenges and aspirations you have to ensure we are helping you meet your moment.