Kenneth Hlavacek

Director, Cybersecurity Chief Privacy Officer @Maryland Department of Transportation

Hanover, MD

The Maryland Department of Transportation (MDOT) is a large organization, with over employees, an annual budget of approximately $5.5 billion. MDOT responsibilities cover all nodes of transportation: airports, seaports, motor vehicles, busses, light rail, bridges, tolls, tunnels, and highways. The Director, Cybersecurity is part of the executive management team and the Chief Information Security Officer and Chief Privacy Officer for MDOT, drives the security strategy and implementation forward while protecting the organization from security threats. Implemented new vulnerability scanner that increased visibility and reduced MDOT’s risk score by 7% Implemented a Network Access Control (NAC) system that resulted in increased visibility into MDOT’s network, increased security through controlled access to the network. Coordinated and executed IT cyber incident exercises which resulted in improved training and plans Created a cyber risk assessment procedure Established Standard Operating procedures for breaches or incidents, based on the NIST Cybersecurity Framework. Review and determine the impact of proposed legislation o Subject Matter Expert in reviewing proposed legislation, identifying any gaps in MDOT’s policy and procedures, then estimating the impact on MDOT personnel and budget. Implemented a Penetration Testing program that increased the security of MDOT by hardening MDOT systems against intrusion. Manage all teams, employees, contractors, and vendors involved in IT security Provide training and mentoring to security team members o Resulting in increased certifications and qualifications for the cyber team As part of the executive team conduct briefings on status and risks, including taking the role of champion for the overall strategy and necessary budget o Able to effectively communicate highly technical topics to a non-technical audience

Iowa State University

Graduate Certificate, Information Assurance / Cybersecurity

Iowa State University

Masters in Engineering, Information Assurance / Cybersecurity

Embry-Riddle Aeronautical University

MBA, Aviation

Southern Illinois University, Carbondale

BS, Marketing