Chief Security Evangelist & Advisory CISO at Segura®
Cybersecurity Leader | Author | Speaker | Advocate
I’ve spent over 30 years securing systems, leading cyber defense initiatives, and helping organizations take a proactive approach to risk.
As Chief Security Evangelist & Advisory CISO at Segura®, I bring technical insight, policy-level experience, and a passion for cybersecurity education to every conversation.
I’m the author of Cybersecurity for Dummies, a globally recognized guide read by over 20,000 professionals. I also host Security by Default, a podcast that explores real-world risks, best practices, and lessons from top experts.
Insights on resilience, risk, and leadership in cybersecurity.
In a recent conversation, a senior executive at a major software company unpacked the hidden implications of unchecked AI adoption in the enterprise. From their vantage point—advising Fortune 500 CISOs and CTOs on security strategy—the threat is clear: Shadow AI is the new Shadow IT, and its impact may be even more disruptive.
Read Full Article ›
Recently, I had an interview with a seasoned identity expert from a global retail manufacturing giant who joined the conversation to unpack the evolution of IGA, share real-world challenges, and explore where the industry is heading next.Here are the top takeaways from that insightful discussion.
Read Full Article ›
Forward-thinking organizations are now optimizing their cybersecurity budget through smarter investments, tool consolidation, and security automation, transforming security from a cost center into a value driver.
Read Full Article ›
Gain visibility into every user, machine, and privilege. Identity discovery is step one to stopping identity-based attacks.
Read Full Article ›
A single default password exposed the Louvre’s crown jewels. Learn how weak privileged credentials can dismantle even the strongest defenses.
Read Full Article ›
This year, I joined NATO’s Locked Shields: the world’s largest cyber defense simulation. We defended critical systems under live-fire attack scenarios, gaining real-time insight into identity risk, infrastructure resilience, and cross-team coordination.
Hidden identities are the easiest way in.
This guide shows how to discover and control every account before attackers do.
Real-world risks. Straight answers. Join me as I sit down with industry leaders to talk breaches, resilience, and what actually works in identity security.
I’ll be at conferences and summits around the world—come connect with me in person.
04 - 05 February 2026
Bangkok, Thailand
9th - 11th February 2026
Kuala Lumpur, Malaysia
13th - 14th February
Helsinki, Finland
