Eckerd College

Clemson University

University of South Florida

Texas McCombs School of Business

Director of Cybersecurity  -  President InfraGard Atlanta  -  Gartner CISO Governing Body

InfraGard is a partnership between the Federal Bureau of Investigation (FBI) and members of the private sector for the protection of U.S. Critical Infrastructure. Through seamless collaboration, InfraGard connects owners and operators within critical infrastructure to the FBI, to provide education, information sharing, networking, and workshops on emerging technologies and threats. InfraGard’s membership includes: business executives, entrepreneurs, lawyers, security personnel, military and government officials, IT professionals, academia and state and local law enforcement—all dedicated to contributing industry-specific insight and advancing national security.

InfraGard National Members Alliance

Regional Coordinator

McKesson

Director of Cybersecurity, Training Strategy and Cyber Communities

InfraGard is a partnership between the FBI and members of the private sector. The InfraGard program provides a vehicle for seamless public-private collaboration with government that expedites the timely exchange of information and promotes mutual learning opportunities relevant to the protection of Critical Infrastructure. With thousands of vetted members nationally, InfraGard's membership includes business executives, entrepreneurs, military and government officials, computer professionals, academia and state and local law enforcement; each dedicated to contributing industry specific insight and advancing national security.

Infragard Atlanta Members Alliance (IAMA)

President Of The Board Of Directors

Executive Board Member

·	Build and retain a high performing team of security operations analysts.  This includes all aspects of management, hiring, retaining, training, growth and advancement of team.
·	Ensure all incidents are managed appropriately and per policy and procedure.  Effectively communicate threats and incident details to senior technology and business unit leadership.
·	Create and maintain program metrics for security events and incidents to be provided to the business unit leadership teams on a quarterly basis.
·	Coordinate all requests for audit evidence from the Active Defense organization.  This includes responses for internal audit, PCI and SOC reviews.
·	Organize and facilitate the periodic business unit engagement sessions for all major business units, including the quarterly BU security event and incident metrics review and the annual cybersecurity table top exercise.
·	Engage directly with the business unit leadership to review the metrics for quarterly security events and incidents.  This includes sharing trending over time and promoting the Active Defense team to the business unit leadership team.
·	Manage the Active Defense financial processes by coordinating investment planning and maintaining the monthly forecasts.
·	Serve as an officer on the Board of Directors for the Atlanta Chapter of InfraGard, an FBI sponsored program.
·	Serve as a liaison between the ISRM Security Awareness team and the Atlanta FBI and Secret Service organizations.
·	Present on cybersecurity topics at industry events, including Gartner CISO Summit.

Director, Alpharetta SOC and Global Active Defense Program Management

·	Design and execute the program to deploy the ISRM WAF solution for priority applications as part of the ISRM Cybersecurity program.  This effort includes establishing the critical path items and dependencies for deployment, socializing the project to business application teams, creating customer facing promotional materials, representing the ISRM organization and available technology solutions, implementing individual deployments and providing overall program metrics.
·	Design and execute a program to accelerate the adoption of the User Access Review process.  This effort included improving the technology, creating a repeatable implementation process, socializing the solution to the business application teams, staffing ISRM roles to support this solution, facilitating the execution of reviews, meeting the customer’s expectations and providing overall program metrics.
·	Provide program management, strategy and financial guidance for ISRM initiatives, including the SIEM replacement and the IAM Service.
·	Collaborate with McKesson ETS on key enterprise technology projects, provide ISRM requirements and use cases, communicate and escalate project status and potential issues to senior leadership.
·	Drive the ISRM strategy, objective planning and periodic reporting of status for ISRM corporate and BU assigned resources, aggregate periodic updates for ISRM leadership.
·	Manage the ISRM financial processes, coordinate strategic planning, accruals and capital investments.  Provide recommendations to cost center owners and senior leadership members with regards to financial management and investments.

Director, Cybersecurity Program Management

In her role with RelayHealth, Katie drove the Business Unit Risk Management program and strategy. Enabled Patient Solutions to meet business goals by integrating security into product development lifecycles, business processes through leveraging existing McKesson risk management processes.
Additional accomplishments:
·	Documented control exceptions and compensating controls, classify risk based on business impact and control framework, HIPAA, PCI DSS, McKesson corporate controls, etc., assign ownership (RelayHealth Financial Solutions, McKesson ETS, ISRM, RelayAccount) and consistently followed remediation to closure.
·	Facilitated annual RelayAccount PCI DSS certification through collaboration with McKesson ETS, ISRM, RelayHealth Financial Solutions and the RelayAccount product and business teams.
·	Reduced cost of PCI audit by 50% through collaboration with ISRM and other PCI businesses throughout McKesson Corp.
·	Nominated as a RelayHealth President’s Club Achiever in 2012.

BISO, McKesson RelayHealth

In her role at The Home Depot, Katie was responsible for advancing security controls across the retail technology line of business.  This included partnering with the executive for retail IT, representing the security program, processes and goals.  This role also included performing application security assessments through architectural reviews, interviews, and security vulnerability scanning.  The tools used for vulnerability scanning included: nmap, Webinspect, Foundstone and QualysGuard.

The Home Depot

Lead Security Engineer

In her role as manager at SunTrust, Katie was responsible for technology and leadership of the team that supports the identity management infrastructure for the enterprise.  This included the Identity Management Framework, Compliance Management (attestation or periodic review), Role and Application Repositories (RBAC), Enterprise Role development and governance, Password Management, Single Sign-On, and Security Awareness Training.

Katie Ewers