About
Security executive with 25+ years across military, government, consulting, big tech…
Articles by Rob
-
ISTS 2026: Red Teams, Rochester, and Good Conversations
ISTS 2026: Red Teams, Rochester, and Good Conversations
Every year I make the trip up to Rochester for ISTS (the Information Security Talent Search), put on by RITSEC, the…
16 Comments -
Baking with Ketchup: How the "Customer Is Always Right, in Matters of Taste" Applies to Cybersecurity Testing
Baking with Ketchup: How the "Customer Is Always Right, in Matters of Taste" Applies to Cybersecurity Testing
Chef Marcel, a renowned pastry chef known for his exquisite celebration cakes. A customer commissioned him to create a…
9 Comments -
The Cyber Slinky Effect
The Cyber Slinky Effect
You know that frustration when in traffic that surges forward, only to stop short again a few seconds later, eventually…
6 Comments -
The King Is Dead, Long Live the Queen
The King Is Dead, Long Live the Queen
For years, Google has reigned supreme as the go-to destination for finding answers on the internet. The term "Google…
3 Comments -
3 Top Corporate Concerns for Generative AI
3 Top Corporate Concerns for Generative AI
These are my 3 top concerns from an offensive and strategic point of view. What are yours? 1.
3 Comments -
Addressing Cybersecurity Challenges Through Collaborative Solutions
Addressing Cybersecurity Challenges Through Collaborative Solutions
In the realm of cybersecurity, a significant problem persists: most companies attempt to tackle issues independently or…
2 Comments -
Four Phases of Offensive Security Teams
Four Phases of Offensive Security Teams
For brevity, I will be using the term “partner” to refer to the customer, Defensive Team, IT Team, or other direct…
15 Comments -
Tribe of Hackers: Red Team Edition
Tribe of Hackers: Red Team Edition
Recently I had the privilege and honor to be asked for my input into the Tribe of Hackers - Red Team Edition book. This…
2 Comments -
Getting Hired: A Few Tips
Getting Hired: A Few Tips
In early August of 2017 I posted a few tips to Twitter regarding interviewing and getting hired in general. I’ pasting…
5 Comments -
Friendly Fire
Friendly Fire
The unfortunate result of a competitive relationship Since the dawn of Tiger Teams (in the 1970s — Wikipedia) which in…
13 Comments
Activity
-
CorkSec 155 is just a few days away (Tues May 12), with a packed night. Normally if we added a Careers night, networking, Pizza, or an…
CorkSec 155 is just a few days away (Tues May 12), with a packed night. Normally if we added a Careers night, networking, Pizza, or an…
Liked by Rob Fuller
-
Great to be at the Cyber Venture Forum powered by Blu Ventures today 🙌 Thomas Rogers and Peter Brophy are on-site connecting and talking all things…
Great to be at the Cyber Venture Forum powered by Blu Ventures today 🙌 Thomas Rogers and Peter Brophy are on-site connecting and talking all things…
Liked by Rob Fuller
-
Pat Opet is right. “Run the latest software versions” is the goal. But there’s a tension we don’t talk about enough. “It’s often difficult to…
Pat Opet is right. “Run the latest software versions” is the goal. But there’s a tension we don’t talk about enough. “It’s often difficult to…
Liked by Rob Fuller
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Licenses & Certifications
Languages
-
English
Native or bilingual proficiency
-
Japanese
Limited working proficiency
Recommendations received
3 people have recommended Rob
Join now to viewOther similar profiles
Explore more posts
-
Jeff Baldwin, DSc
DFARS 7012 requires contractors to implement NIST SP 800-171 to protect Covered Defense Information (CDI). DFARS 7019/7020 requires contractors to perform a basic assurance self-assessment and submit a score to SPRS that is within 3 years of contract award. DFARS 7021 specifies the CMMC level required to be awarded a DoD contract. CMMC levels require either self-assessment or third-party assessment. When making the determination of the level required for a contract, there is a memo that outlines the process that must be followed by the DoD program manager to obtain a waiver to "CMMC assessment requirements" for that contract. "Program Managers and requiring activities should identify information security requirements for the types of information most likely to be associated with the planned contract effort. When market research indicates that including a CMMC assessment requirement may impede ability to generate robust competition or delay delivery of mission critical capabilities, the SAE, CAE, or DAE may approve requests to waive inclusion of CMMC assessment requirements. SAEs and CAEs must carefully weigh the risk of potential loss of CUI associated with mission critical capabilities before granting a waiver." Level 1 - "There are no circumstances likely to warrant approval of requests to waive CMMC Level 1 requirements." Level 2 - "In rare circumstances. such as when seeking competition from non-traditional DoD sources. waivers may be warranted for CMMC Level 2 third-party assessment requirements. Such waivers are not appropriate for contracts requiring performance by a cleared defense contractor. Approved waivers on a class basis must include a planned expiration date and guidance for requiring CMMC certification in subsequent solicitations." Level 3 - "In rare circumstances, waivers may be warranted for CMMC Level 3 third-party assessment requirements: such waivers, however, are not appropriate for contracts or work statements requiring access to both unclassified and classified DoD information." Full memo on the process found here, starting on page 6: https://lnkd.in/eeBCW53n #cmmc #dib #dfars
12 Comments -
Manuel W. Lloyd
Doctrine Emergency Bulletin: Global SBOM Guidance Issued On September 3, 2025, CISA, NSA, and 14 allied nations released joint guidance on Software Bills of Materials (SBOMs), urging governments and industry to adopt SBOMs as a baseline for software supply chain security. This Doctrine Emergency Bulletin (DEB) underscores that transparency without sovereignty is insufficient. SBOMs reveal components — but only Zero Doctrine™ enforces isolation and doctrinal control. Join our tabletop simulation: “Supply Chain Breach Doctrine Response.”b Book here » https://lnkd.in/eWAERm8k 📜 Our Cybersecurity Constitution™ Article V, Clause 4 — Sovereign Origination of Technical Input states “No foreign-origin technical instruction shall be admitted into sovereign systems, even under domestic escort.” Stay sovereign, stay uncompromised. — Manuel W. Lloyd
-
ShadowDragon
#OSINT isn’t just for experts anymore. Horizon Identity empowers any team to uncover patterns, links, and real-world identity details - without needing OSINT skills or special training. One search bar for access to more than 550 publicly available data sources and more than 1,500 endpoints to make your investigation easy. Learn more here: https://hubs.la/Q03rsWqm0 #cai #investigations #shadowdragon #horizonidentity #pai #osintforgood #realtimeintel
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top content