Brian Haugli

SideChannel

We're on a mission to make cybersecurity simple and accessible.

Chief Executive Officer

Inside Director on Board of Directors for SideChannel, Inc. Publicly traded company on the OTCQB.  

Stock Ticker: SDCH

Member Board of Directors

Virtual CISOs. Real Cybersecurity.

At SideChannel, we match companies with an expert virtual CISO (vCISO), so your organization can assess cyber risk and ensure cybersecurity compliance — all without jeopardizing your financial assets. Is your organization ready to take control of its security?

From providing your organization with an initial Risk Assessment to helping ensure cybersecurity compliance, our services are designed to give exactly what your organization needs, when it’s needed, without any added hassle. 

Working with SideChannel means to work with actual CISOs, with private and public sector experience, solving critical problems for Fortune 500 companies and beyond. We’re not a group of consultants working from a cookie-cutter playbook. We’re not a team of junior analysts.

We’re SideChannel – seasoned experts with decades of experience, and we’re ready to transform the way your organization thinks about cybersecurity.

Managing Partner

Founder

RealCISO.io

RealCISO is a cybersecurity risk assessment SaaS platform for small and mid-size enterprises.

🔗 Protect your business: know your cyber risks before buying solutions
💰 Win more deals: don’t let cybersecurity questionnaires block sales
🎉 Achieve compliance quickly: prepare for SOC 2, CMMC, PCI, ISO, NIST, HIPAA and others
🔧 Know what tools to buy: customized recommendations from our curated marketplace

A cloud platform to help any company or organization understand, manage, and mitigate their cyber risk easily. Built on the Critical Security Controls and recognized open standards to identify issues and immediately access a curated marketplace to procure the right solutions to address gaps.

CISOlife YouTube and Podcast

#CISOlife - https://www.youtube.com/c/sidechannel

LinkedIn, YouTube Video and Podcast on risk, cybersecurity, and #CISOlife. Zero sponsorships, no vendor influence, just pure riff.

Creator & Host

Boston College

Master of Science (M.S.) in Cybersecurity Policy and Governance program, Woods College of Advancing Studies

Incident Response & Management Course

Adjunct Professor

Zscaler

Advisor

The Hanover Insurance Group

Corporate Security Office across US domestic and international information and physical security operations 
• Consistently rated as achieving or surpassing performance standards year over year.  Management, peer and Board feedback all score high with delivering on promises, being able to quickly get at root cause, willing to invest time to learn and ability to communicate complex subjects in layman’s terms.
• Developed & delivered the strategic vision, resources, and protocols to maintain enterprise IT security, mitigate risk, oversee vendor risks, and influence user behavior by elevating the profile and importance of information security at the company.
• Developed and managed a $7.5 million budget in line with strategic growth needs supporting information security
• Structured, hired, and retained new team of engineers and analysts to address information security and data protection risks for company.   Grew team appropriately and cost consciously over 4 years on global scale.  Thoughtfully leveraged outsourced managed service solutions alongside onsite personnel to create a productive and meaningful collaborative atmosphere for team members.
• Acted as lead representative on all information and physical security initiatives for all stakeholders. Regularly interfacing with the enterprise risk management group, legal, human resources, and internal audit, in regard to company policies, procedures and plans.  
• Regularly briefed the Board of Directors, Audit Committee, and corporate executive leadership of risks and plans to address.
• Significantly decreased amount of delinquent or open audits within first 6 months in role.
• Developed and implemented new plans for security incident response.  Oversaw tabletop exercises to ensure that all stakeholders were involved and knowledgeable about their responsibilities.  Successfully exercised plans in both actual responses and training scenarios through red team and penetration tests.

Vice President, Chief Security Officer

• Designed, implemented and managed full stack open source threat hunting platform; Elasticsearch, Logstash, Kibana, Suricata, Snort, & Bro. Integrated with critical asset log sources and end-point detection & response capabilities; Carbon Black, Ossec, GRR
• Designed, implemented, and managed open and closed source intelligence gathering platform using STIX/TAXII, CSV, & CEF
• Implemented and managed successful user behavior analytics platform to identify user and account-based threats within the environment.  Successfully detected and responded to insider threats through capture of and correlating web traffic, user habits, file access, and physical movement. Integrated metrics into human resources and legal processes to expedite issue resolution.
• Implemented and managed open and closed source vulnerability management/remediation platform; OpenVAS, Nessus, Tenable
• Designed and implemented open source phishing simulation platform to test end-user awareness and inform training opportunities
• Brought together key security and risk stakeholders to design, develop, refine and review enterprise IT security and risk strategies, including, the development and maintenance of NIST Cyber Security Framework standards that meet the company’s needs.
• Coordinated investigations and responses to all security incidents.  Recommended and implemented countermeasures to reduce impacts and risks of future related events or incidents.

Vice President, Chief Information Security Officer

CGI Federal

U.S. Department of Defense, Pentagon, US Army ITA
• Lead strategic initiatives for Pentagon on cyber security, information risk management, auditing, and compliance.
• Directed a team of 35 cyber security professionals across multiple disciplines in separate geographic locations.
• Directed and lead 4 successful Department of the Army Inspector General (DAIG) inspections & audits for customer over 3 years 
• Developed methodology and reporting capability for tracking and managing exploit category vulnerabilities to increase compliance 
• Designed and developed web based tracking system for enterprise and system level POA&Ms 
• Developed methodology and reporting capability on "Insider Threat" for DoD based on NIST framework
• Active member of the US Army CIO working group on Risk Management Framework implementation for Army ICS systems
• Ability to complete complex cyber security projects involving all phases of information assurance and network operations to include: assess, address, correlate, analyze, and provide courses of action for decision. 
• Develops high quality assessments that provide an understanding and resolution to security-related events as they occur. 
• Assesses impact, determines probable damage and suggests methods of damage control, conducts in-depth analysis, and follow-on investigation to build historical and predictive capabilities. 
• Analyzes and recommends resolution of security problems based on expert knowledge of the major IA products and services, a vast understanding of their limitations, and a superior knowledge of the disciplines of IA.

Information Assurance Program Management Division Lead, Pentagon

RPI Consulting

U.S. Department of Defense, National Reconnaissance Office

Senior Systems Engineer, NRO

Vangent, Inc.

U.S. Department of Defense, Military Health System, Force Health Protection and Readiness

Enterprise Architect, DoD MHS

Resolvit

IT Manager

As the CEO of SideChannel, a publicly traded cybersecurity company ("SDCH"), I lead a team of passionate and talented professionals who are on a mission to make cybersecurity simple and accessible for small and mid-sized enterprises. With over 20 years of experience in the security industry, I have held senior advisory and practitioner roles within the DoD, the Intelligence Community, and Fortune 1000 companies, delivering risk management capabilities and effective operating models.

I am also the founder of RealCISO.io, a cybersecurity risk assessment SaaS platform that helps businesses and organizations understand, manage, and mitigate their cyber risks easily and efficiently. As a Wiley published author and a creator and host of the #CISOlife YouTube and Podcast, I share my insights and expertise on the NIST Cybersecurity Framework, industrial control systems, and operational technologies. I am a certified CISSP, GICSP, and Security+, and an Eagle Scout. I enjoy mentoring and teaching, and I have served as an adjunct professor at Boston College.

Something seems off here... Didn't, wait yes. Didn't Sisense just disclose a massive breach that had CISA publish warnings due to impact on other platforms?

When do we look back at these third party audits?

What about the auditors?

What about the standard itself?

Less than 6 months after Sisense is granted an ISO certification is reveals a breach with serious consequences to it's customer base and beyond.  I'd love to see a Brian Krebs level report dig further in beyond the breach itself.

Sundays, for me, seem to be turning into a day of call-outs on infosec.

Brian Krebs

24 years of friendship, building/breaking networks, and having fun all along the way.  From the early 2000s in Boulder, CO to working in the DoD to building SideChannel, RealCISO, and now Enclave.  Here's to it all Nick Hnatiw!

Boom. Thank you everyone! 17,000 followers.

Now live in RealCISO... NIST CSF 2.0.  

The first data driven vCISO platform built by real CISOs for both MSSPs/MSPs and enterprises.

🎉 Easily pivot from CSF v1.1 to v2.0 in a few clicks.  

🎈 Take a CIS v8 assessment and quickly auto-complete a CSF v2.0.  

National Institute of Standards and Technology (NIST) || SideChannel || Center for Internet Security

Offering vCISO services represents a significant opportunity for MSPs and MSSPs to expand their service portfolio, drive revenue growth, and address a critical market need.

Brian Haugli on LinkedIn • 4 min read

Offering vCISO Services: A Roadmap for MSPs and MSSPs

At a cyber conference today and CISOs still feel they only have 2 choices to manage a program in... Excel or some largely inadequate GRC platfrom.

3rd and better option: RealCISO 

https://realciso.io 

realciso.io • 1 min read

Home

Thanks Delinea for the quote!  We should use compliance frameworks as a methodology for techniques and processes to incorporate in their cybersecurity program.

thehackernews.com • 6 min read

CISO Perspectives on Complying with Cybersecurity Regulations

Ready to elevate your cybersecurity strategy without overspending?

sidechannel.com • 3 min read

Understanding the Cost of a vCISO

In a compelling episode, I welcome Andrew Pendergast, Managing Director at NFP, to delve into the intricacies of Directors & Officers (D&O) Insurance to CISOlife™. 

This episode provides a thorough breakdown of how D&O Insurance operates and its significance for Chief Information Security Officers (CISOs). 

Pendergast, with his extensive expertise in insurance and risk management, discusses the coverage aspects that are particularly relevant to CISOs, highlighting how this type of insurance can protect against personal liabilities that may arise from the decisions and actions taken in their professional capacities. 

This discussion is invaluable for CISOs and other executives who want to understand the protective measures available to safeguard their personal and professional interests.  

#ciso #vciso #cisolife #cybersecurity #insurance

Strategic client operations discussion at SideChannel HQ with Director of Engineering Dele Owoye and CTO Nick Hnatiw.

Thank you Delinea & The Hacker News for the mention in this article.  There is a difference between being compliance-dependent and using compliance frameworks to guide informed risk management.

Check out how easy it is to use frameworks & standards to guide risk management with RealCISO.

https://lnkd.in/eZPdPhex #vciso #ciso #cisolife

SideChannel has you covered. Cybersecurity and privacy solutions that meet your industry’s unique needs. 

With decades of experience serving the private and public sectors, we deliver holistic #cybersecurity services that help teams protect their data and assure their peace of mind.

https://lnkd.in/e6bQRX-t 

sidechannel.com • 1 min read

Cybersecurity Services | SideChannel

Building a robust cybersecurity program requires a comprehensive and proactive approach. By following these top 10 steps, you can establish a strong foundation for protecting your organization’s systems and data. 

Remember, #cybersecurity is an ongoing process, and it requires continuous monitoring, evaluation, and adaptation to address emerging threats. 

Stay vigilant, stay informed, and stay secure! #ciso #vciso #cisolife

sidechannel.com • 9 min read

Top 10 Steps to Build a Robust Cybersecurity Program

The first step in building a robust #cybersecurity program is to assess your organization’s current security posture. 

This involves conducting a comprehensive evaluation of your existing security measures, identifying vulnerabilities, and understanding potential risks. 

By assessing your current security posture, you can gain valuable insights into areas that require improvement and prioritize your cybersecurity efforts.

https://lnkd.in/eQGAijzV #vciso #ciso #cisolife

Would you click on a file named employeebonus.zip?

The Microsoft engineers involvement in xz is this year's Marcus Hutchins WannaCry moment.

Organizations across the cryptocurrency industry are vulnerable to cyberattacks. 

At SideChannel, we are the pioneers in cybersecurity for crypto. 

We help our crypto clients, everywhere along the digital asset supply chain, protect their most critical assets with tailored, cost-effective cybersecurity services. 

Find out how we can take your organization’s defense to the next level.

https://lnkd.in/eqSNNwum 

Taplio

Brian Haugli's Linkedin Analytics

Brian Haugli

What is Brian talking about?

Brian Haugli's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Brian Haugli's Linkedin Analytics

Brian Haugli

What is Brian talking about?

Brian Haugli's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Brian Haugli's Linkedin Analytics

Brian Haugli's Best Posts (last 30 days)