Mercury Risk and Compliance, Inc.

CISO and Cybersecurity Strategist, leading the cyber risk management and showcasing how effective cybersecurity metrics empower informed decisions and greater overall value.

CISO and Cybersecurity Strategist

The Futurum Group

Collaborating with amazingly talented peers to tackle the most pressing problems and provide cybersecurity insights on emerging threats and industry best practices.

Advisory Board Member - Futurum Group’s CyberSphere CISO Advisory Board

Dominican University of California

The professionals of today must support the preparedness of the next-generation cybersecurity workforce. That is why I am thrilled to join the Master of Science in Cybersecurity (MSC) Advisory Board for Dominican University of California.

This newly formed Advisory Board will help provide experience, guidance, and oversight for the program to benefit the students in their cybersecurity career journey!

Advisory Board Member - Master of Science in Cybersecurity (MSC)

In my new LinkedIn Learning class, I discuss the five biggest mistakes made by cybersecurity organizations, regardless of their size or stature, and how to manage risk more effectively to avoid costly blunders.

LinkedIn Learning Instructor

United Cybersecurity Alliance

I am honored to join the United Cybersecurity Alliance advisory board.  This organization is focused to improve the cybersecurity industry by driving and celebrating equity, inclusion, and equality for a diverse workforce that possesses the skills to protect organizations and communities from cyber-attacks.  

As a member of the distinguished Advisory Board, we are united to help realize a vision that will shape the future of cybersecurity opportunities and an inclusive workforce.

Advisory Board Member

World Business Angels Investment Forum

Private Directors Association®

I am very excited to join with esteemed cybersecurity colleagues on Private Directions Association’s (PDA) Cyber Security Initiative Strategic Council.  Our charter is to drive timely and relevant communications to the board member community.

https://www.privatedirectorsassociation.org/cyber-security-initiative-strategic-council

University of Phoenix, College of Business and Information Technology

Thrilled to announce that I am joining the Advisory Board for the University of Phoenix, College of Business and Information Technology! Academia plays a crucial role in fulfilling the staffing needs for the growing cybersecurity industry! We must all play a role to help prepare the next generation of professionals.

Independent

Cybersecurity Strategist that actively advises global businesses, academia, and governments to identify emerging risks and opportunities.  Formerly the Cybersecurity Strategist for Intel Corp. and benefiting from 30 years in the security field.  
 
Keynote Speaker, an evangelist for cybersecurity best-practices, member on multiple technical and academic advisory boards, and collaborates with the top minds in the cybersecurity industry.  Top 10 Technology Voice in 2018 by LinkedIn, Top 10 Cybersecurity Thought Leader in 2019 by Thinkers360, and is heavily engaged with a very active following of over 190k professionals.

Champions collaboration, partnerships, and communication across technology and cybersecurity organizations.  Publishes blogs, evaluates technology and processes, authors opinion and whitepapers, and develops industry methodologies to improve security effectiveness and efficiencies.  An active speaker and moderator at cybersecurity conferences, and evangelizes best practices across the digital ecosystem in the pursuit of optimal security.

Cybersecurity Strategist and Advisor

HMG CISO Executive Leadership Summit Advisory Board

I am honored to join the esteemed list of colleagues on the HMG Strategy CISO Executive Leadership Summit Advisory Board.  The charter of the board is to create organizational champions to secure the future enterprise.  We work through the CISO Executive Leadership Summits and the development of joint industry recommendations.

More information on the board can be found here:  http://www.hmgstrategy.com/events/advisory-board.asp?eventID=132

With over 30 years of experience in the cybersecurity industry, I am a pragmatic, passionate, and innovative leader who thrives in challenging and ever-shifting environments. I am a CISO, industry advisor, speaker, innovator, and advisory board member.

My mission is to make the global digital technology ecosystem, trustworthy. 

As the Chief Information Security Officer at Eclipz.io, I oversee the security of the company and pursue an optimal level of protection in support of the overall business goals. I am responsible for understanding the evolving risks, providing a comprehensive security strategy, and implementing controls and policies to manage risks and ensure compliance across the organization.

I am also a trusted advisor, expert, and evangelist for academia, businesses, and governments around the world, sharing my insights and best practices on cybersecurity topics such as emerging threats, cybersecurity predictions, threat-based risk assessments, strategic cybersecurity capabilities, digital ethics, privacy, and disruptive technologies (ex. artificial intelligence, quantum computing, and blockchain).

I have contributed to multiple publications, patents, training programs, and certifications.  I am an active influencer in the cybersecurity community and enjoy delivering engaging keynotes, speeches, interviews, and consulting sessions at various events and platforms. I have a large social following of security professionals that I share, partner, and collaborate with to tackle some of the most difficult problems we face. 

I am an experienced leader in building world-class teams and capabilities, managing security operations, evangelizing best practices to the market, developing security products, and improving corporate security services.

Specialties Include:
Cybersecurity thought leadership, risk analysis, and innovation
Identifying evolving cybersecurity opportunities & risks
Board advisor and guide for cybersecurity risk oversight
Executive consulting and communications
Security evangelism and best practices
Cybersecurity strategic planning
Organizational risk management advisement
Industry communication and leadership
Program and project management
Security operations management
Security Return-on-Investment Analysis
Crisis management

Check out my popular LinkedIn Learning Course: Five Biggest Mistakes of Cybersecurity Programs https://www.linkedin.com/learning/five-biggest-mistakes-of-cybersecurity-programs/learn-from-others-mistakes

Nothing surprising here, just a little depressing. Passwords are often ridiculously insecure.

Cognitive limitations in people can manifest as vulnerabilities in digital systems which are easily exploitable.

We must address such cognitive weaknesses so that behaviors change in ways that protects users and systems. Unlike installing a patch or fixing a line of code, changing human nature is a bit more challenging. It takes forethought, investment, and persistence. In the end, it is worth it.

Image Source: https://lnkd.in/gDWDNE2S 

#cybersecurity Ashley M. Rose Sumona Banerji

Matthew Rosenquist

Healthcare faces serious cybersecurity threats and is evolving to embrace modern security across the teams to deliver trustworthy patient care. 

Jason Elrod, CISO of MultiCare Health System, shares his insights on the transformation of healthcare to embrace better cybersecurity practices.  

Check out the full podcast, where Jason discusses the impact of cyber threats on patient safety, the role of AI in healthcare, and the importance of resilience. His insights, positivity, and experience is truly enlightening as he explores the challenges, progress, and mindset of healthcare cybersecurity! 

Full Cybersecurity Insights podcast episode with Jason Elrod, the CISO of MultiCare Health Systems: https://lnkd.in/gs9cRtQm


Also check out his podcast “Drink Coffee. Do Cool Stuff” https://lnkd.in/gpGKZfCS 

For more interviews with industry luminaries, subscribe to the Cybersecurity Insights channel: https://lnkd.in/g-qh2nCk 

#cybersecurity #healthcare

Holiday #cybercrime is surging!  Don't be a victim.  Learn the risks and tips you need to survive this holiday season!  

Cybercriminals are using AI for a massive advantage in automation of realistic fraud, phishing, and fake e-commerce sites.  This season will be more dangerous.

Check out the full article for over a dozen tips to keep you safe from digital fraud and compromise!

#cybersecurity

I am excited to be speaking at the International Conference on Cyberlaw, Cybercrime & Cybersecurity (ICCC 2025) on November 19th at 8pm Pacific (9:30am IST – Mumbai India time). 

The conference strives to examine and analyze the emerging Cyberlaw, Cybercrime and Cybersecurity trends of today’s times. It is an authoritative global event exclusively dedicated to cyberlaw, #cybercrime, and cybersecurity which brings together an extraordinary assembly of jurists, senior judges, legislators, policymakers, law enforcement leaders, #cybersecurity practitioners, corporate counsel, technology developers, digital-rights advocates, and academics representing more than 100 countries.

The panel: "Digital Identity, Personal Privacy, Data Sovereignty & Protection Strategies" will include Vinit Goenka, Atmaram Shelke, Devesh Vats, Raghav Tripathi, Mohd Ujaley, and myself!  

I look forward to a great discussion.

Conference site: https://lnkd.in/g9X_6WrV

Dr. Pavan Duggal #cybercrime #cyberlaw

AI powered espionage is an eventuality.  We need to start thinking about how powerful AI tools will help attackers bent on Industrial (competitors) and Economic (nation state sponsored) espionage.  

Because of the automation capabilities, such attackers will be able to cast wider nets to steal information faster, better, and on a grander scale.  The compelling nature of LLM and the speed of agentic AI systems will increase the chances of success.  The holes created in the network with improper AI permissions and the misuse of poorly configured internal tools will facilitate both ingress and massive exfiltration of sensitive data by adversaries.  

It is coming.  People in the professional espionage space see the power of AI and will take advantage of the growing opportunities.  

Those organizations who have valuable data should be looking forward at this evolving threat vector and preparing now, before it is too late.   

The recent post by #Kiteworks outlines many of the risks and outlines the implications.

#espionage 
Sponsored Post

Cybersecurity in healthcare faces serious problems and has evolved to focus on patient safety, embracing AI, and being resilient. Jason Elrod, the CISO of MultiCare Health System and Founder of Limitless Cyber, shared his humor, insights for strategic prioritization, and concerns about the evolving threat landscape.

Cybersecurity Insights - Cybersecurity Vault podcast, Ep#50
00:01:17 Healthcare as Critical Infrastructure
00:01:46 Cyber Threats and Patient Safety
00:03:10 Ransomware and Compliance
00:06:05 Prioritization and Investment
00:11:31 AI in Healthcare
00:16:52 Threat Actors and Risks
00:24:53 Cultural Shifts in Cybersecurity

Check out his Drink Coffee. Do Cool Stuff podcast:  https://lnkd.in/gpGKZfCS  

Explore all the Cybersecurity Vault podcasts on the Cybersecurity Insights channel: https://lnkd.in/g-qh2nCk

Watch the full Podcast Episode: https://lnkd.in/gs9cRtQm 

#Cybersecurity #Healthcare #AI #PatientSafety

Cyber risk has evolved beyond IT — it’s now a core business priority.

As credential abuse declines thanks to multi-factor authentication, exploited vulnerabilities have surged to become the #1 entry point for ransomware and extortion.

What’s alarming is that these weaknesses are within our control — yet often remain unfixed.

Join me and Robert Leong, Senior Director of Product Management, HCL BigFix at HCLSoftware, for an exclusive Cybersecurity Leadership roundtable on November 20th at 11 AM ET.

Together, we’ll unpack why organizations still struggle to fix what they find and how leaders can Accelerate, Collaborate and Consolidate to build true cyber resilience.

Reserve your seat today. https://hclsw.co/10mfvh

 

Sponsored Post
#HCLBigFixRemediate #HCLSoftware #Cybersecurity #SaaS

Cyber vulnerabilities are being exploited because the attackers can move faster than the defenders who are applying the patches. Cybersecurity must accelerate the vulnerability remediation process with better collaboration and prioritization, to keep pace with the accelerating threats!
 
Join Robert Leong, the Senior Director of Product Management at HCL BigFix, and I as we discuss these challenges and industry best practices in an exclusive cybersecurity leadership roundtable on November 20th.
 
Be sure to register for this webinar and join the discussion. 
Reserve your seat today. https://hclsw.co/02fvy1

Sponsored Post
#HCLBigFixRemediate #HCLSoftware #Cybersecurity #SaaS

BigFix Remediate

Thanks to the Trust in Digital Life Association for hosting a great panel discussion about the major #cybersecurity trends in 2025. 

It was my honor to share insights with Iva and Scott.
 
Watch the video for the full discussion or check out the summary and key points on their substack: https://lnkd.in/g5puJkUu 

- Scott Algeier, President and CEO, Conrad, Inc. Cybersecurity Consulting
- Iva Tasheva, Co-founder and cybersecurity lead, Cyen
- Matthew Rosenquist, Founder Cybersecurity Insights; CISO, Mercury Risk and Compliance, Inc.

The session was moderated by TDL strategic advisor, Claire Vishik.

https://lnkd.in/g-PRJVXm

I will be speaking on the Trust in Digital Life Association - Major Cybersecurity Trends in 2025 webinar on Thurs Nov 20th 10am ET (7am Pacific)!  Come join the event.

This panel will discuss major trends in technology, regulatory space, new threats and approaches to defenses that defined cybersecurity in 2025. From advances in Post Quantum Cryptography to new AI enabled attacks, from AI regulations to new assurance approaches, 2025 was marked by many changes, lessons learned and new technology directions.

https://lnkd.in/gh8pJYpU

#AI #cybersecurity #PQC

In 2026 the cybersecurity industry will shift in response to the overwhelming adoption of AI solutions and services.  There will be a focus on ShadowAI, security interfaces, prompt controls, access deviations, and even data aggregation exposure risks.  In short, it will come down to AI cybersecurity governance.  The right policies must be defined with a better understanding of context, expressed in automated security controls, and overseen to ensure continuous compliance.  It will be one of the biggest challenges faced by cybersecurity next year!

Check out this blog by my partners at #Kiteworks about this growing blind spot!

If you ever ask yourself if Privacy is important or question the value of keeping your family's personal data out of social media, watch this video.

It is not only your life, but your innocent posts can undermine the privacy of others, including children!  

- When you post "Happy 5th Birthday", you have just revealed their birthdate.  
- When you post a picture of a child at a school football game, you reveal the location they live, the school they attend, and weekly schedule.  Not to mention inroads for topics that might lure that child into an online conversation.
- When you post high-resolution images of people, you are providing training data for deep-fakes that can be used for horrifying threats, coercion, abuse, and bullying.

Let's be smart, security, private, and safe.  Make informed decisions when online.  If you have questions, reach out to your friendly #Privacy or #Cybersecurity professional.

Great PSA post Emerald!

Global Privacy & AI Governance Executive at Logitech | Founder | Board Advisor on Tech Risk, Regulation & Responsible Innovation

💯An absolutely brilliant video from the Irish Data Protection Commission on sharenting.

In times of talks about deregulating, “privacy doesn’t matter” and questions about whether existing data protection law is fit for an age of AI, we must not lose sight of the fundamentals. We don’t just do this job because it’s compliance. Privacy matters for more reasons than the law and when it comes to children it is a fundamental safety issue, especially on social media. 

To be clear; I understand completely it is easy to post and easy to forget not everyone online is a friend or family. I’m not judging anyone here, it’s just that we mustn’t forget that the internet can be a dangerous place and we need to be mindful that posting is often forever.

Do share. It’s a powerful reminder. Great work by the Data Protection Commission Ireland 👏

Not sure why people believe that #privacy will no longer be important as AI adoption rises!  Those threat agents that maneuver to undermine privacy (ex. data brokers and cybercriminals who use ransomware & siphon data) are using AI as a tool to further enhance their attacks.  If anything privacy controls and data security are becoming MORE important as we enter the age of AI!

#Kiteworks Sponsored Post

Software vulnerabilities are exploding — over 100 new ones each day. Attackers are exploiting faster than ever, and remediation is falling behind.

In my recent conversation with Robert Leong, Senior Director of Product Management, HCL BigFix at HCLSoftware, we explored how IT and security teams can accelerate, collaborate, and consolidate to stay ahead.

Watch the full discussion: https://hclsw.co/m2gubr

Explore HCL BigFix SaaS Remediate: https://hclsw.co/id1bvu


#HCLBigFixRemediate #HCLSoftware #Cybersecurity #SaaS #Sponsored

The unfortunate truth is that poorly designed and improperly secured Artificial Intelligence integrations can be misused or exploited by adversaries, to the detriment of companies and users.  Some of the compromises will bypass the traditional cybersecurity and privacy controls, leaving victims very exposed.

Researchers demonstrated that LLMs can be tricked into installing and executing malware on victim machines using direct prompt injection, RAG backdoor attacks, and inter-agent trust exploitation, with 16 of 17 (94%) state-of-the-art LLMs being vulnerable.

Check out #Kiteworks recent blog that dives into the numbers and breaks down the attack vectors.

Sponsored Post

I have never been a fan of web forms.  Too many things can go wrong or be manipulated, which can expose the data.  Always be careful when accessing or filling out web forms, and be extra careful if asked for any type of authentication as part of the process.  It is better to be wary and safe!

Kitework's recent article lays out the Top 5 risks every user and organization should know!

Sponsored Post
#kiteworks

The functionality ease of webforms can hide the necessity for proper security diligence.  Webforms are easy, have a long history, and are well accepted, but there are risks if not properly protected.  The desire to implement something quick and easy, may undermine the expectations of asset confidentiality, integrity, and availability.

Kiteworks recent survey highlighted that 88% had at least one security incident related to webforms in the past 2 years, 44% percent had data breaches, and yet 64% believed their security maturity was advanced or leading.  

The cognitive dissonance is strong and poses a real risk for the future security of these organizations.

Check out the #Kiteworks blog, where the full report can be downloaded (ungated, no registration required!)


Sponsored Post

Security architecture and practices are important to every vendor, but the expectations and consequences are especially high for Cybersecurity products. When a password or credential vendor has multiple breaches, not only do customers abandon them but regulators take notice.

The two data breaches in 2022 compromised information from up to 1.6 million UK users, exposing their email addresses, IP addresses, and in some cases names, telephone numbers, and physical addresses. 

LastPass is being fined over $2m by the UK government, but perhaps more importantly the continuing saga in the media is putting pressure on their reputation and market position, which has been cut in half since before the breaches.

It is an important market lesson for not only security vendors, but all digital companies that rely heavily on consumer trust.  

Cybersecurity can be a competitive advantage or a significant detriment if not managed properly. 

#cybersecurity #trust #password

https://lnkd.in/gUT6uGu8

Had a GREAT time talking live with Monica Verma this morning about how AI is impacting cybersecurity leadership and career development.  

Much thanks to Aaron Stillwell and Alexandru Mavrodineanu for inviting me in as a co-host!  Listen in!

Owner @ APT & Cybersecurity Group | Community Engagement, Event Hosting | Volunteer

Cybersecurity Careers in the Age of AI: How to Stay Relevant and Resilient

Artificial Intelligence is reshaping the world of cybersecurity at lightning speed — creating new opportunities, but also new uncertainties for professionals at every stage of their careers. As automation, AI-driven threats, and emerging regulations transform the field, how can security leaders and practitioners ensure they remain relevant, adaptable, and resilient?

Join us for a special LinkedIn Live conversation with Monica Verma — award-winning cybersecurity leader, podcast host of Monica Talks Cyber, and global keynote speaker.

taplio

Matthew Rosenquist's Linkedin Analytics

Matthew Rosenquist

Performance ScoreMatthew Rosenquist's LinkedIn Performance

What is Matthew talking about?

Matthew Rosenquist's Best Posts (last 30 days)

Ready to grow your LinkedIn presence?

taplio

.css-6ytdur{background-image:linear-gradient(284deg, rgba(39, 43, 72, 1) 0%, rgba(33, 47, 183, 1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Matthew Rosenquist's Linkedin Analytics

Matthew Rosenquist

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Matthew Rosenquist's LinkedIn Performance

What is Matthew talking about?

Matthew Rosenquist's Best Posts .css-1emoo84{font-size:var(--chakra-fontSizes-md);font-weight:400;color:var(--chakra-colors-gray-600);}(last 30 days)

Ready to grow your LinkedIn presence?

Matthew Rosenquist's Linkedin Analytics

Performance ScoreMatthew Rosenquist's LinkedIn Performance

Matthew Rosenquist's Best Posts (last 30 days)