Search IANS

This AAE Writeup outlines a hybrid authentication approach that enables CISOs to strengthen security controls while reducing latency and supporting scalable, cross-platform application development.

This AAE Call Summary gives you direct access to IANS Faculty guidance on how to simplify, strengthen, and scale your approach to vendor risk.

This AAE Writeup outlines how to secure onboarding to help new CISOs quickly understand the organization, navigate key challenges, and drive impact from the start.

This document breaks down how organizations like yours should approach Data Inentory and Mapping by creating an accurate, up‑to‑date view of what data exists; how it moves; and who processes it across systems, products and services.

This Principle underscores that maintaining data inventories and flow maps is essential for identifying and managing privacy‑related security risks. This visibility enables teams to meet obligations like RoPA, DSARs and vendor oversight while enforcing governance and lifecycle controls.

This one-day event is designed for security practitioners to gain actionable technical solutions and leadership insights focused on current and emerging challenges. Engage with IANS Faculty members and network with peers who are tackling similar challenges.

This AAE Call Summary gives you direct access to IANS Faculty guidance on building and executing an AI security program that balances control with flexibility.

Download the summary for practical guidance on the guardrails, governance strategies, and controls needed to securely scale agent deployment without exposing sensitive data.

Download a summary version of IANS’ 2026 Small and Mid-Market Cybersecurity Talent Report

Rich is the Chief Analyst at the Cloud Security Alliance where he focuses on leading-edge cloud and AI security research and implementation. He has over 25 years of security experience, with over 15 years of focusing on cloud and emerging technologies. Prior to joining the CSA full time Rich frequently collaborated with CSA as the principle course designer of the CCSK training class, primary author of the Guidance, and developer of the Cloud Security Maturity Model, among other projects. As Researcher and CEO of Securosis, RIch taught cloud security and incident response at Black Hat for over 10 years, developed the free Cloud Security Lab a Week (CloudSLAW) project, and actively works on developing hands-on cloud security techniques. Rich also founded DisruptOps, a cloud security startup acquired by FireMon where he became the SVP of Cloud Security. Prior to founding Securosis and DisruptOps, Rich was a Research Vice President at Gartner on the security team. Prior to his seven years at Gartner, Rich worked as an independent consultant, web application developer, software development manager at the University of Colorado, and systems and network administrator.

Rich is the Security Editor of TidBITS and a frequent contributor to industry publications. He is a frequent industry speaker at events including the RSA Security Conference, Black Hat, and DefCon, and has spoken on every continent except Antarctica (where he's happy to speak for free -- assuming travel is covered).