Errol Weiss

About Errol Weiss

Errol is an accomplished information security executive recognized internationally as a visionary and a leader in threat intelligence operations and management. He has proven ability to build information security strategies aligned to business risk and corporate goals.Errol joined the Health Information Sharing & Analysis Center (Health-ISAC) in April 2019 as its first Chief Security Officer. He created and staffed Health-ISAC\'s Threat Operations Center in Titusville, Florida, which provides nearly 800 health organizations around the world with meaningful and actionable threat intelligence relevant for IT and infosec professionals in the healthcare sector. Errol began his infosec career at NSA conducting vulnerability analyses and penetrations of classified US Government systems. He left NSA to pursue a career in information security and delivered consulting services such as Penetration Testing, Commercial Cyber Threat Intelligence, Security Product Implementations and Secure Network Designs for Fortune-100 companies. Errol was a key member of the team responsible for the creation, implementation and operation of the world’s first ISAC – the Financial Services ISAC. He’s one of the four named inventors on the patent for Trusted and Anonymous Information Sharing. Errol is married and enjoys living in sunny Florida, taking advantage of the year round great weather with outdoor activities like road biking, tennis and swimming. Errol also enjoys crosswords and is a fan of the NY Times puzzle, confidently tackling the Sunday through Thursday puzzles with the goal of one day completing the Saturday grids.

Experience

1. Executive Member

   CyberEdBoard Community

   Apr 2021 — Present

Education

• The Johns Hopkins University

  MS, Technical Management

  1991 — 1993

• Bucknell University

  BSE, Computer Engineering, American Literature

Skills

• Information Technology
• Computer Security
• Cyber-Security
• Security Policy
• Pci Dss
• IT Risk Management
• Disaster Recovery
• Cissp
• Information Security
• Data Security
• Security
• Business Continuity Planning
• Iso 27001
• Payment Card Industry Data Security Standard (Pci Dss)
• Vulnerability Assessment
• Fraud
• Cism
• Operational Risk Management
• Messaging
• Cobit
• Firewalls
• Data Privacy
• Privacy Law
• Security Management
• Risk Assessment
• Cisa
• Payment Industry
• Network Security
• Enterprise Risk Management
• Risk Management
• Penetration Testing
• Information Assurance
• Computer Forensics
• Governance
• Vulnerability Management
• Security Architecture Design
• Business Continuity
• Identity Management
• Glba
• Risk Analysis