As Chief Information Security Officer (CISO), Gary Hayslip guides Webroot's information security program, providing enterprise risk management. He is responsible for the development and implementation of all information security strategies, including the company's security standards, procedures, and internal controls. Gary also contributes to product strategy, helping to guide the efficacy of Webroot's security solutions portfolio. As CISO, his mission includes creating a "risk aware" culture that places high value on securing and protecting customer information entrusted to Webroot. Gary has a record of establishing enterprise information security programs and managing multiple cross-functional network and security teams. Gary is co-author of "CISO Desk Reference Guide: A Practical Guide for CISOs" focused on enabling CISOs to expand their expertise and scope of knowledge. Gary's previous information security roles include CISO, Deputy Director of IT and senior network architect roles for the City of San Diego, the U.S. Navy (Active Duty) and as a U.S. Federal Government employee. In these positions he built security programs from the ground up, audited large disparate networks and consolidated and legacy network infrastructure into converged virtualized datacenters. Gary is involved in the cybersecurity and technology start-up communities in San Diego where he is the co-chairman for Cybertech, the parent organization that houses the cyber incubator Cyberhive and the Internet of Things (IoT) incubator iHive. He also serves as a member of the EvoNexus Selection Committee where he is instrumental in reviewing and mentoring cybersecurity and IoT startups. Gary is an active member of the professional organizations ISSA, ISACA, OWASP, and is on the Board of Directors for InfraGuard. Gary holds numerous professional certifications including: CISSP, CISA, and CRISC, and holds a Bachelor of Science in Information Systems Management and a Master's degree in Business Administration. Gary has more than 28 years of experience in Information Security, Enterprise Risk Management, and Data Privacy.
