Ask a CISO: How Can I Improve My Cyber Risk Management Program?

      Brian Fricke is a business-centric technology professional, specializing in strategic Enterprise Information Security Policy, Operations, and Technology Risk Management. With the primary goal to balance the needs of the business with security requirements; Programs are established or revamped to comply with various US/Global laws (GLBA/HIPAA), regulations (FFIEC/FINRA), and Security Industry best practices control frameworks (ISO/NIST) in order to prevent, detect, and respond to security events and incidents. Based in Miami, FL, he is currently the Chief Information Security Officer of City National Bank of Florida, and acts as the Senior Executive for all Technology and Cyber Risk concerns, overseeing Cyber Operation. He has been establishing innovative Information Security Programs for over 15 years in Military, Government, and Financial Institutions, ensuring adherence to the most restrictive security requirements across all industries. His widest set of responsibility covered the information & cyber security risk portfolio of over 600 sites, 30,000 Personnel, and 20,000 systems and endpoints across the globe. 
      A 5-year active-duty US Marine; Brian also served as a civil servant for 10 years in various agencies with an increasingly wider scope of duties. He served at The US Agency for International Development (USAID), the Securities Exchange Commission (SEC) in New York, and as a Security Program Manager at the Joint Chiefs of Staff in the Pentagon. He also served for 3 years as an officer of the Board of Directors of OutServe, a 501(c)(3) non-profit. His last role in government was the CISO and Cyber Security Branch Manager at the US Navy's Military Sealift Command (MSC) at the Washington Navy Yard before transitioning to the Financial sector. He has held CISO roles at mid size, and large financial institutions, the last two having a global presence where he ran US operations and advised Global CIO/COOs on unique approaches to Programmatic management of Business Line risk, product security, and establishing governance and oversight committees. He was Class President of the George Washington University School of Business, World Executive MBA, Class of 2013, and holds a Graduate Certificate in Strategic Cybersecurity Enforcement.