Richard Brooks

About Richard Brooks

Richard “Dick” Brooks is a CMU/SEI certified Professional Software Architect with over 40 years of software engineering accomplishments. He is a prolific \"software engineer\" producing useful software products and services that protect people from cyber crime in the software supply chain, promoting the application of verifiable trust in digital products following NIST Guidance and IETF SCITT standards, and CISAs \"Secure by Design\" principles and CISA Secure Software Assurance Buyers Guide practices, https://cisa.gov/sag In 2018 Dick Co-Founded Business Cyber Guardian (TM)(BCG) with Joanne Brooks to focus on the development of SCRM solutions following OMB M-22-18 NIST Guidance, called SAG-PM (TM), to satisfy supply chain regulations Business Cyber Guardian™ has one primary goal and one mission, to establish and verify trustworthiness in the digital age by operating the highest integrity, most accurate and timely software product \"Trust Registry\" in the world, SAG-CTR™ providing trust scores, SAGScore™ based on a patented (US11••••61) Seven step risk assessment process implemented in SAG-PM™ following OMB M-22-18 NIST Guidance and CISA Secure by Design best practices in the CISA Software Acquisition Guide https://cisa.gov/sag while committing to protect and defend our customers adhering to Bushido principles He is a retiree of ISO New England and a Software Architect for ISO New England\'s Forward Capacity Market (FCM) Clearing Engine, an active member of NAESB, the DHS CISA ICT_SCRM Task Force, Software Assurance Work Group, CISA\'s Critical Manufacturing Sector SRMA Coordinating Council CM SCC, and the IETF Supply Chain Integrity, Transparency and Trust ( SCITT ) working group focusing on standards for consumer visibility into software product trustworthiness using a \"Trust Registry\", SAG-CTR. He is also the facilitator of the #SBOM SIG LinkedIn community of SBOM implementers Member.Inventor of US patent 11,374,961 for software supply chain risk assessment methodologies and trust scoring (SAGScore) calculations:METHODS FOR VERIFICATION OF SOFTWARE OBJECT AUTHENTICITY AND INTEGRITY He has worked on Energy cybersecurity and secure messaging standards within NAESB since 1995, earning an ANSI meritorious service award; Founding participant of IETF SCITT, Bushido #42 #SBOM SIG

Experience

1. Co-founder and Lead Software Engineer

   Reliable Energy Analytics Llc D B A Business Cyber Guardian

   Dec 2018 — Present

   Complete info available here: https://github.com/rjb4standards/Presentations/blob/master/README.md

Education

• University of Massachusetts Lowell

  Computer Science

  1979 — 1985

• Carnegie Mellon University

  SEI, Professional Software Architect

  2006 — 2008