Tim Hastings

About Tim Hastings

Throughout my 25+ years in cybersecurity, I’ve been passionate about helping organizations strengthen their defenses and stay ahead of potential threats. As a CISO and cybersecurity consultant, I focus on building proactive, visibility-driven security programs that prioritize resilience and preparedness.In my current role as the full-time CISO at Legato Security, I lead efforts to implement forward-thinking security strategies, enabling our clients to confidently protect their most critical assets. My experience includes serving as the CISO for the State of Utah, where I developed and deployed robust defense strategies. At Mandiant, I analyzed state-sponsored attack groups, and at Deloitte, I had the privilege of strengthening cybersecurity programs for Fortune 100 companies across healthcare, manufacturing, finance, and government sectors.I’m dedicated to empowering security teams with the tools and strategies they need to stay ahead of emerging threats and respond with confidence. My mission is to create resilient, detection-focused security programs that not only safeguard organizations but also drive innovation in how we approach cybersecurity.

Experience

1. Advisory Board Member

   Hermanscience

   Jul 2024 — Present

Education

• Mays Business School - Texas A&M University

  Bachelor of Business Administration (BBA), Accounting

  1994 — 1999

• Texas A&M University

  Master of Science (MS), Accounting

  1994 — 1999

Skills

• Information Security
• Risk Management
• Security Regulatory Compliance
• Sarbanes-Oxley
• Sas70
• Security
• Management
• Governance
• Business Process Improvement
• Information Security Management
• Security Management
• IT Audit
• Risk Assessment
• Sarbanes-Oxley Act
• Internal Controls
• Auditing
• Enterprise Risk Management
• Internal Audit
• Privacy Law
• Privacy
• Cisa