Christopher Duffy

About Christopher Duffy

As a Principal within PwC\'s Cybersecurity Data and Technical Risk (CDTR) practice in the Washington metro area, I work hand in hand with clients to enhance overall capabilities. I am a leader within PwC\'s Responsible AI (RAI) working group, and drive our AI Red Teaming capabilities as the leader of the US Firm\'s Cyber Penetration Testing Team (CPT^2). I have had a variety of experiences over my career, but my particular focus is around Threat Management, Strategy, Risk Reduction, and overall Cyber Resiliency. In particular, I help move organizations move from transactional capabilities to institutionalizing security as part of the business risk dialogue. This includes providing perspectives on technology and key subjects as they moved from emerging to mainstream such as AI, Blockchain, and innovative combination platforms. My 20 years of experience and diverse background has allowed me to reinvest on a regular basis to the firm as Specialist on our acquisition and Joint Business Relationship identification team.

Experience

1. Principal (Non-cpa Partner) Within Cybersecurity Data Technical Risk (Cdtr) & Responsible Ai

   PwC

   Jul 2020 — Present · Washington, DC, US

   Focuses on client needs related to Threat Management, Strategy, Resiliency, and Remediation- Leads the US Firm\'s Cyber Penetration Testing Team (CPT^2)- A member of our acquisition and Joint Business Relationship development and identification team- Supports integration of tooling & assessment to identify potential risks in DevOps pipelines- Thought leader for institutionalization of security within workforces and emerging technology- A leader of the Responsible AI Working group with focus on AI Red Teaming and Model Testing- Leader for the development of automations such as custom GPTs, automated attack servers, Deep Fake capabilities, generators, and analyzers focused on assessment optimization and efficacy

Education

• USAF Electronic Principles

  Electrical and Electronics Engineering

  2003 — 2003

• Trident University International

  Bachelor of Science, Computer Science

  2007 — 2009

• Capitol Technology University

  Doctorate of Science (DSc), Cybersecurity

  2015 — 2020

• USAF Computer Networking and Cryptographic Switch Systems Technical Training

  Computer and Information Sciences, General

  2004 — 2004

• Western Governors University

  National Information Assurance Training Standard for Senior System Managers -NSTISSI No 4012

  2010 — 2012

• Wharton Executive Education

  AI Partner Program, Artificial Intelligence

• Western Governors University

  Master of Science (M.S.), Information Security and Assurance

  2010 — 2012

• USAF Undergraduate Network Warfare Training

  Cyber Warfare Specialist, Penetration Testing

  2009 — 2009

• Harvard Business School Executive Education

  Executive Education, RevUp Partner Program, Organizational Leadership

• Community College of the Air Force

  Associates of Applied Science, Electronic Systems Technology

  2003 — 2006

• Western Governors University

  National Training Standard for Information Systems Security (INFOSEC) Professionals -NSTISSI No 4011

  2010 — 2012

Skills

• Wireless Networking
• Vmware
• Centralised Audit Server Design & Deployment
• Security Analysis
• Security Management
• Dod
• Data Privacy
• Ips
• Disaster Recovery
• Dns
• Atm Networks
• Cloud Security
• Dhcp
• Metasploit
• Active Directory
• Unix
• Windows Server
• Information Security
• Network Programming
• Cybersecurity
• Business Continuity
• Cyber Warfare
• C&a
• Cisco Technologies
• Leadership
• Sql Injection
• Information Assurance
• Management
• Ettercap
• Perl
• Cloud Computing
• Computer Security
• Cyber-Security
• Security Consulting
• Security
• Nmap
• Sql
• Linux
• Project Management
• Risk Analysis