Reserve your seat

Speakers

Paul Agosta

Paul Agosta

Cloud Security Officer & Rev5 Lead — General Services Administration (GSA)

Matthew Akers

Matthew Akers

United States Postal Service Office of the Inspector General

Elisha “Emu” Crow

Elisha “Emu” Crow

Cloud Security Engineer and Lead 20x Assessor — General Services Administration (GSA)

Dan Chandler

Dan Chandler

Cloud Security Engineer, FedRAMP — General Services Administration (GSA)

Ryan Hoesing

Ryan Hoesing

Chief of Staff, FedRAMP — General Services Administration (GSA)

Trey Maust

Trey Maust

Chief Innovation Officer — Federal Deposit Insurance Corporation (FDIC)

Victoria Yan Pillitteri

Victoria Yan Pillitteri

Manager, Security Engineering and Risk Management Group — National Institute of Standards and Technology (NIST)

Gino Sarcomo

Gino Sarcomo

Director of Risk Management and Chief Information Security Officer — Defense Information Systems Agency (DISA)

Eric Rivera

Eric Rivera

Assistant Inspector General for Audits — Export-Import Bank, Office of the Inspector General

Nicole Thompson

Nicole Thompson

Security Director, FedRAMP — General Services Administration (GSA)

Sam Aydlette

Sam Aydlette

Engineering Program Manager — Cisco

Hemant Baidwan

Hemant Baidwan

CISO — Knox Systems

Christian Baer

Christian Baer

Technical Fellow — Schellman

Michael Cardaci

CEO — FedHIVE

Michael Carter

President — Fortreum

Matt Conner

Matt Conner

CISO — Second Front Systems

Denyette DePierro

Denyette DePierro

US Financial Services, Public Policy — AWS

Gary Daemer

Gary Daemer

Founder & CEO — InfusionPoints

Chris DeRusha

Chris DeRusha

Director of Global Public Sector Compliance — Google Cloud

Matt Earley

Matt Earley

Founder & President — 38North Security

Stephen Eng

Stephen Eng

Engineering Manager — Persona

Zach Fasnacht

Zach Fasnacht

Public Sector Product Manager — Vanta

John Gallagher

John Gallagher

GRC Technical Lead — OpenAI

Lisa Gold

Lisa Gold

Founder and Principal — GoldStandard Advisors

Devin Gordon

Principal Solutions Architect — AWS

Daniel Gorfine

Daniel Gorfine

Senior Advisor — Cloud Service Providers – Advisory Board (CSP-AB)

Marshall Gray

Marshall Gray

Senior Manager — Coalfire

Edward Graham

Edward Graham

Managing Editor — NextGov/FCW

Gary Guercio

VP of Operations — Fortreum

Nic Hall

Nic Hall

Technical Program Manager — Wiz

Mitch Herckis

Mitch Herckis

Global Head of Government Affairs — Wiz

Dale Hoak

CISO — RegScale

Matt Hungate

Matt Hungate

Managing Principal — Schellman

Kylie Hunter

Kylie Hunter

Solutions Advisor — RegScale

Chris Johnson

Chris Johnson

Chief Technology Officer — Knox Systems

Kristine Lam

Kristine Lam

Executive Director — Cloud Service Providers – Advisory Board (CSP-AB)

Josh Magri

Josh Magri

CEO — Cyber Risk Institute

Drew Myklegard

Drew Myklegard

Executive Director of Government Programs — Carahsoft

Mike Kim

Mike Kim

CEO & Co-Founder — Mycroft

Irfan Nawaz

Irfan Nawaz

Senior Director, Government Technology Accreditation  — Salesforce

Ross Nodurft

Ross Nodurft

Executive Director — Alliance for Digital Innovation

Lee Neeper

Lee Neeper

Director of Quality Management — A-LIGN

Ken Palmer

Ken Palmer

Engineering Manager — Confluent

Mike Schreiner

Mike Schreiner

COO — Paramify

Nino Scimemi

Nino Scimemi

Vice President of Security Operations — Knox Systems

Kenny Scott

Kenny Scott

Founder & CEO — Paramify

Will Shah

Will Shah

Technical Program Manager — Google Cloud

Isaac Teuscher

Isaac Teuscher

Senior Security Engineer — Paramify

Rene Tshiteya

Senior Director, Cybersecurity & Compliance — stackArmor

Matthew Venne

Matthew Venne

CTO — stackArmor

Ben Ware

Ben Ware

Head of Public Sector Compliance — Oracle

Robert Wilkinson

Robert Wilkinson

Lead Security Compliance Analyst — FedHIVE

Shaping the future of secure trusted resilient scalable cloud adoption

September 29-30, 2026

Fuse at Mason Square
3401 Fairfax Drive
Arlington, VA 22201
USA

The CSP-AB Summit is a high-impact forum bringing together Federal policy leaders, industry stakeholders, and security experts around a single mission: accelerating secure cloud adoption across the Federal enterprise.

Reserve your seat today:

Days
Hours
Minutes
Seconds
Register now

Reserve your seat today:​

Days
Hours
Mins
Secs
Register Now
Paul Agosta

Paul Agosta

Cloud Security Officer & Rev5 Lead — General Services Administration (GSA)

Linkedin

Biography

Paul joined FedRAMP in December of 2024 and currently serves as the lead for Rev5 Certification activities. Paul brings over two decades of experience in the emerging technology space within the federal government. This includes the development and deployment of private clouds within the Intel Community, engineering and piloting experimental unmanned platforms, and the development and integration of multiple Electronic Warfare, SIGINT, and medical technologies.

Paul holds multiple graduate degrees to include an M.S. in Cybersecurity and Information Assurance, an M.S. in Systems Engineering, and an M.B.A. Additionally, Paul serves as an adjunct professor teaching both Computer Science and Business courses at a local university. Paul is an Army veteran with multiple combat deployments. In his free time, Paul enjoys cold beer, Texas style BBQ, and spending time with his beautiful family… In that order.

Matthew Akers

Matthew Akers

United States Postal Service Office of the Inspector General

Biography

Matthew joined the USPS OIG in January 2022 and has worked on a variety of audits including Network Processing, Cyber Security & Technology and Transportation. He currently works in Audit Services supporting training programs.

Prior to this, Matthew worked for the Naval Audit Service since 2002, including as an Audit Manager since 2010. He led a variety of audits as an audit manager including audits on Naval SEAL training, IT system controls, diversity and inclusion training for Officers, and compliance with Congressional Budget requirements.

He is a Certified Internal Auditor and holds a B.S. in Business Administration from the University of Pittsburgh. In his spare time, Matthew enjoys spending time with his wife and two children and spends a lot of time at baseball and softball games.

Elisha “Emu” Crow

Elisha "Emu" Crow

FedRAMP Cloud Security Officer and 20x Lead — General Services Administration (GSA)

Linkedin

Biography

Emu is cloud security engineer and lead assessor for FedRAMP 20x. She led the high achieving Vanguard team through both phases of 20x pilot reviews and continues to champion their effort in iterating the 20x review process to awesome.

Prior to FedRAMP, she was the Tech Director of Security Operations and Engineering at the Air Force DevSecOps unit known as Kessel Run. As custodian of the security processes and tech stack which enabled the software factory’s continuous ATO (cATO), she was able to experience first hand how cloud-native architecture and mature, modern security practices can be embedded into existing government compliance programs to significantly speed up software deployment.

As a troubleshooting adrenaline junkie, she has spent over 20 years responding to outages and incidents, cackling her way through resolving difficult issues. Much of her career was spent in Healthcare Informatics travelling the world as a one person HealthTech tiger team in diagnostic and interventional cardiology suites.

She resides in a swamp with her beloved cats and chickens. She is often found propagating native plants, lifting heavy things, curling up with a good book, mercilessly destroying her teenager at Dr. Mario and generally being up to no good.

Dan Chandler

Dan Chandler

Cloud Security Engineer, FedRAMP — General Services Administration (GSA)

Linkedin

Biography

Dan Chandler is a cloud security engineer on the FedRAMP team, where he provides policy guidance and technical expertise.

Before joining the FedRAMP team, Dan worked at the Office of Management and Budget (OMB) from 2007 – 2025. He served in multiple roles, including as the Program Manager for MAX.gov and as the first OMB CISO. Dan has the unique distinction of being the first person to complete the FedRAMP “trifecta”: managing a Cloud Service Provider (CSP), working as an Agency CISO authorizing FedRAMP CSPs, and now working on the FedRAMP team.

Dan is passionate about public service and cybersecurity. When he is not protecting the government’s data, he enjoys woodworking, playing with dogs, and spending time with his children.

Ryan Hoesing

Ryan Hoesing

Chief of Staff, FedRAMP — General Services Administration (GSA)
Linkedin

Biography

Ryan joined FedRAMP in December 2016 as a business analyst with the goal of finding and building out more efficiencies in the FedRAMP A&A processes.

With over 10 years of direct engagement with FedRAMP customers, both agencies and cloud service providers, Ryan has ensured agencies and CSPs have the guidance they need to successfully complete the FedRAMP Authorization process. Ryan developed and continues to lead FedRAMP’s Agency Liaison program educating agencies on new FedRAMP initiatives.

Ryan holds a B.A. in Business Administration from the University of Nebraska-Lincoln and a M.S. in Cybersecurity Management and Policy. Additionally to his outward facing role supporting FedRAMP stakeholders, Ryan is a Contract Officer’s Representative (COR) Level III and helps guide internal acquisition and business strategies for FedRAMP.

Trey Maust

Trey Maust

Chief Innovation Officer — Federal Deposit Insurance Corporation (FDIC)

Linkedin

Biography

Trey Maust is the Chief Innovation Officer of the FDIC, in the Office of the Chairman, where he guides the agency’s efforts to promote innovation and technology adoption within the FDIC and across the financial services sector, while strengthening how the agency understands, evaluates, and supervises innovation across the banking system. His work is informed by the societal, economic, and technological forces reshaping everyday life. His perspective reflects three decades of banking, technology, professional services, resilience, and public policy.

Trey spent the first decade of his career in public accounting and M&A. He later co-founded a de novo bank and led the institution from formation to maturity, ultimately serving as its Executive Chairman. He was a founding board member and later the Chief Executive Officer of a financial sector operational resilience initiative that covered nearly three-quarters of the nation’s deposit accounts and retail brokerage client assets. He subsequently co-founded and led a company focused on integrating the raw materials of banking into the products, platforms, and workflows of financial technology companies and commercial enterprises.

Throughout his career, Trey has held leadership, board, and chairmanship roles with numerous state and national banking organizations and private enterprises, and has advised regulatory bodies on banking policy, supervision, and industry modernization. He is also a licensed Certified Public Accountant.

Victoria Yan Pillitteri

Victoria Yan Pillitteri

Manager, Security Engineering and Risk Management Group — National Institute of Standards and Technology (NIST)
Linkedin

Biography

Ms. Victoria Yan Pillitteri is a supervisory computer scientist in the Computer Security Division at the National Institute of Standards and Technology (NIST). Ms. Pillitteri is the Manager of the Security Engineering and Risk Management Group and leads the Risk Management Framework team/Federal Information Security Modernization Act (FISMA) Implementation Project. In that role, she develops the suite of risk management guidance used for managing cybersecurity risk in the federal government and coordinates the associated stakeholder outreach and public-private sector collaboration efforts. Ms. Pillitteri leads the Joint Task Force working group, a partnership with the Department of Defense, the Intelligence Community, and Civilian Agencies to develop a unified security framework to protect the U.S. Government from cyber-attacks, and is co-chair of the Federal Cybersecurity and Privacy Professionals Forum hosted by NIST.

Ms. Pillitteri previously led programs in smart grid and cyber-physical systems cybersecurity, worked on the Framework for Improving Critical Infrastructure Cybersecurity, the Privacy Framework, and served as a program analyst in the NIST Office of the Director.

Ms. Pillitteri holds a B.S. in Electrical Engineering from the University of Maryland and an M.S. in Computer Science with a concentration in Information Assurance from The George Washington University. She has completed the Key Executive Leadership Program at American University and the Office of Personnel Management (OPM) Senior Executive Service Candidate Development Program, receiving an SES certification by the OPM Qualifications Review Board. Ms. Pillitteri is a Certified Information Systems Security Professional (CISSP).

Gino Sarcomo

Gino Sarcomo

Director of Risk Management and Chief Information Security Officer — Defense Information Systems Agency (DISA)

Biography

Gino Sarcomo is the Director of Risk Management and the Chief Information Security Officer at the Defense Information Systems Agency. As the Director, he is responsible for balancing operational and technical risk in the development, testing, deployment, and operations of systems, networks and applications. Sarcomo leads military, civilians and contractors in security assessments, authorizing official activities, threat mitigation, and adversary emulation operations.

Sarcomo is a retired Air Force Cyberspace Operations officer and has served in several command, staff and joint positions, including commander, 437th Communications Squadron (later 628th Communications Squadron) at Charleston Air Force Base, South Carolina; commander, 376th Expeditionary Communications Squadron at Manas Transit Center, Kyrgyz Republic; Commander, 5th Communications Squadron at Minot Air Force Base, North Dakota; commander, Fourth Group and Commander, Basic Cadet Training at the United States Air Force Academy, Colorado.

After retirement from the Air Force, Sarcomo spent several years in the private sector, taking on leadership roles in cybersecurity and in cybersecurity consulting, supporting multiple Fortune 500 clients in the energy, transportation, tech and financial services sectors and a major professional sports league.

He has a Bachelor of Science in Computer Information Systems, a Master of Arts in Organizational Leadership and is a Certified Information Systems Security Professional – Information Systems Security Architecture Professional.

Eric Rivera

Eric Rivera

Assistant Inspector General for Audits — Export-Import Bank, Office of the Inspector General

Linkedin

Biography

Eric Rivera serves as the Assistant Inspector General for Audits at the Export-Import Bank of the United States (EXIM) Office of the Inspector General (OIG). Mr. Rivera brings more than 20 years of federal government service, spending most of his career working withing the Inspector General community.

Prior to joining EXIM OIG, Mr. Rivera served as the Deputy Assistant Inspector General for Audits at the Nuclear Regulatory Commission (NRC), Office of the Inspector General, where he oversaw performance and financial audits of complex nuclear safety programs at the NRC and the Defense Nuclear Facilities Safety Board (DNFSB).

Mr. Rivera previously served at the NRC OIG in multiple roles. He was the Team Leader for the Financial and Information Technology Audit Team for more than seven years. In addition, Mr. Rivera served as the project lead for the annual financial statement audit of the NRC and the DNFSB. Prior to being a Team Leader, Mr. Rivera was an Audit Manager for the Nuclear Safety Audits Team at the NRC OIG.

Mr. Rivera began his federal career at the NRC, Office of the Chief Financial Officer (OCFO). During his tenure at NRC OCFO, Mr. Rivera worked on the preparation of the agency’s financial statements. He also served as the project lead for NRC’s Performance and Accountably Report and the agency’s OMB Circular A-123 compliance efforts.

Mr. Rivera has a bachelor’s degree in business administration from the University of Puerto Rico – Mayaguez (2003), and a master’s in business administration from the University of Maryland, Robert H. Smith School of Business (2019). He is also a Certified Public Accountant (CPA) and a Certified Government Financial Manager (CGFM).

Nicole Thompson

Nicole Thompson

Security Director, FedRAMP — General Services Administration (GSA)

Biography

Nicole joined FedRAMP in January 2025 as the FedRAMP Security Director. She has over 15 years of experience in cybersecurity, specializing in hardware/software integration, vulnerability management and remediation, and penetration testing.

Nicole previously worked at the Defense Digital Service as the cybersecurity engineer running the Hack the Pentagon program.

She is passionate about improving risk management decision processes by relying on more meaningful security metrics.

Sam Aydlette

Sam Aydlette

Engineering Program Manager — Cisco

Linkedin

Biography

Sam Aydlette is an Engineering Program Manager at Cisco, where he works on offerings for the U.S. Public Sector. He has spent more than a decade in cybersecurity across federal government and private-sector roles. His experience with FedRAMP spans several perspectives: contributing to federal policy, advising hyperscale CSPs on meeting FedRAMP requirements, and running the scans himself. That breadth of experience shapes his holistic approach to the work. Before entering cybersecurity, he served as an infantryman with the 82nd Airborne Division.

Hemant Baidwan

Hemant Baidwan

CISO — Knox Systems

Linkedin

Biography

Hemant Baidwan is the Chief Information Security Officer (CISO) at Knox Systems, where he leads enterprise cybersecurity strategy and the development of AI-driven, cloud-native security platforms. He is responsible for building a next-generation Cyber Fusion Center that integrates automation, real-time analytics, and advanced threat detection across multi-cloud environments. His work focuses on operationalizing Zero Trust at scale, enabling rapid FedRAMP and IL4/IL5 authorizations, and embedding security directly into DevSecOps pipelines to deliver continuous compliance and near real-time risk visibility. He is also driving the adoption of AI to enhance response automation and predictive risk modeling across government and commercial workloads. 

Previously, Mr. Baidwan served as the CISO and Acting Deputy Chief Information Officer at the U.S. Department of Homeland Security (DHS), where he was responsible for securing one of the largest and most complex civilian federal environments. He oversaw the Department’s Information Security Program, including FISMA compliance, risk management, security operations, and continuous monitoring across a multi-billion-dollar IT portfolio. During his tenure, he led major initiatives such as the Hack DHS program, the Unified Cybersecurity Maturity Model (UCMM), Cyber Supply Chain Risk Management (C-SCRM), and enterprise Zero Trust implementation. He also served as Vice Chair of the Federal CISO Council and as a Board Member of the FedRAMP Board, helping shape government-wide cybersecurity and cloud security policy. He played a key role in advancing AI-driven cybersecurity capabilities and modernizing security operations across the Department. 

Mr. Baidwan brings over 20 years of leadership experience across cybersecurity, cloud security, governance, and large-scale digital transformation in both the public and private sectors. He has led the modernization of Risk Management Framework (RMF) processes, implemented continuous authorization and monitoring at scale, and driven automation to improve security outcomes and reduce operational burden. He is known for aligning cybersecurity strategy with mission outcomes and delivering measurable improvements in enterprise risk posture. 

Earlier in his career, Mr. Baidwan held senior leadership roles in the private sector, where he led global IT and security organizations, scaled secure infrastructure across multiple regions, and drove innovation in secure application development and enterprise architecture. 

Mr. Baidwan holds a bachelor’s degree in information systems and has completed executive leadership programs at Cornell University and Johns Hopkins University.

Christian Baer

Christian Baer

Technical Fellow — Schellman

Linkedin

Biography

Christian Baer is a Technical Fellow with Schellman based in Rockville, MD. Christian specializes in federal assessments at Schellman, including compliance with a variety of frameworks and standards including FedRAMP, FISMA, GovRAMP, and CMMC. Prior to joining Schellman, Christian worked as an enterprise assessor where he specialized in performing risk assessments to determine compliance with federal security and regulatory requirements. Christian has over 10 years of experience comprised of serving clients in various industries, including the private and public sector. Christian is now focused primarily on FedRAMP assessments for organizations across various industries.

Michael Cardaci

CEO — FedHIVE

Linkedin

Biography

Michael Cardaci: Michael is a serial entrepreneur, having owned several companies both inside and outside of the technology industry; He is currently the CEO of HRTec, a cyber security and government contracting firm that provides a range of I.T. products and services to both private organizations and government clients. Michael attended George Mason University and is an expert in the fields of IT, Security, and Data analysis; and having worked in those areas for over 30 years, managing the increasing requirement for access, analysis and security around CUI and PII data, at the same time complying with the required DITSCAP, DIACAP, RMF, SRG, and FedRAMP frameworks. This experience plus the breadth of knowledge from multiple industry gives him a unique perspective on small and mid-sized businesses and the issues that affect them.

In recent years, Michael has led HRTec to develop FedHIVE, one of the first Cloud Service Offerings created by a small business specifically as a Compliance as a Service company, providing an accelerator to authorizations at the FedRAMP High and IL4/5 level. Since then, Michael has moved HRTec to broaden its scope of business to ensure government contractors have accessibility to scalable, customer driven, cybersecurity and cloud services. In today’s era of large tech firms and rampant cybercrime, prior preparation with a high touch personalized security approach, prevents poor performance when a cyber-attack happens. FedHIVE’s Mission is no exfiltration of Government data.

Michael Carter

President — Fortreum

Linkedin

Biography

President of Fortreum, LLC, where he oversees operational delivery across the company’s Assurance, Cyber Defense and Readiness, and Override practices, as well as the development roadmap and strategy for Kovr, Fortreum’s AI-native cyber compliance automation platform. 20+ years of experience in information assurance with a strong focus on cloud security compliance. Supported FedRAMP engagements since the program’s inception, including serving as the project lead for the first JAB and Agency authorized cloud service providers. Maintains multiple certifications, including PMP, CISSP, LCCA, CCA, CCP, SecurityX, CGRC, AWS CCP, CCSK, and NSA-IAM.

Matt Conner

Matt Conner​

CISO — Second Front Systems

Linkedin

Biography

Matt Conner joined Second Front as the Chief Information Security Officer (CISO) in May 2024 after previously serving as an independent Board Director. Mr. Conner leads the cybersecurity program at Second Front, and is responsible for cyber defense, risk management, policy, and cybersecurity governance.

Prior to joining Second Front, Matt served as the CISO for Westinghouse Electric Company, a global nuclear energy firm operating in more than 20 countries. Mr. Conner previously served as the CISO of the US Intelligence Community and was the principal advisor to the Director of National Intelligence and Chief Information Officer for cybersecurity risk and governance. He was responsible for orchestrating the cybersecurity program for the eighteen agencies of the IC and defined the strategy and implementation plan for the people, processes, and technology to lead the IC into the future.

Matt was the Chief Information Security Officer for the National Geospatial-Intelligence Agency in Springfield, VA between 2015 and 2020 and formerly held senior leadership roles with General Dynamics Mission Systems and Information Technology. Mr. Conner and his family live in Northern Virginia.

Denyette DePierro

Denyette DePierro

US Financial Services, Public Policy — AWS

Linkedin

Biography

Coming soon…

Gary Daemer

Gary Daemer

Founder & CEO — InfusionPoints

Linkedin

Biography

Gary Daemer is the CEO and Founder of InfusionPoints, a cybersecurity, cloud engineering, and compliance firm that helps organizations build, operate, prove, and defend secure cloud environments. With nearly 40 years of experience spanning federal, commercial, and defense sectors, Gary has built and operated security programs, Security Operations Centers (SOCs), continuous monitoring capabilities, and cloud security platforms supporting some of the nation’s most demanding missions.

Since founding InfusionPoints in 2007, Gary has led the company’s growth into a trusted advisor for federal agencies, cloud service providers, and regulated organizations seeking to accelerate secure cloud adoption. His work focuses on FedRAMP modernization, continuous compliance, authorization automation, and measurable trust through machine-verifiable evidence and continuous assurance.

A long-time advocate for reducing compliance burden while improving security outcomes, Gary brings a practitioner’s perspective to the evolving cloud security landscape. He has supported dozens of cloud authorization efforts, designed secure cloud architectures, and helped organizations operationalize security at scale through automation and outcome-driven approaches.

Prior to InfusionPoints, Gary held leadership and technical roles with AT&T, American Management Systems, Booz Allen Hamilton, Lowe’s Companies, and the North Carolina Army National Guard. He holds a Master of Science in Systems Engineering from Virginia Tech, a Bachelor of Science in Electrical Engineering from UNC Charlotte, and maintains numerous industry certifications including CISSP and multiple AWS certifications.

Chris DeRusha

Chris DeRusha

Director of Global Public Sector Compliance — Google Cloud

Linkedin

Biography

Chris DeRusha has extensive experience managing cybersecurity and critical infrastructure programs and operations both in the public and private sectors. Prior to arriving at Google in June 2024, DeRusha served as the Federal Chief Information Security Officer (CISO) for the U.S. and Deputy National Cyber Director in the White House. In these roles, DeRusha maintained oversight and accountability of federal agency cybersecurity across the entire federal government.

Among other positions, DeRusha has served as Chief Security Officer for the State of Michigan, led Ford Motor Company’s Enterprise Vulnerability Management program, and spent six years at the U.S. Department of Homeland Security. He holds a Master’s Degree in Security Studies from Columbia University and a Bachelor’s Degree in Business Administration from James Madison University. He resides in Washington D.C., with his wife and two sons.

Matt Earley

Matt Earley

Founder & President — 38North Security

Linkedin

Biography

Matt Earley is the Founder and President of 38North Security, a global cloud security advisory, engineering, and technology firm. With more than 25 years of experience across government, critical infrastructure, and Fortune 500 enterprises, he helps organizations turn complex security and regulatory requirements into secure, sustainable cloud operations. Matt leads 38North’s work across FedRAMP 20x, CMMC, DoD, and international compliance programs and is driving the development of NorthWatch, the company’s continuous assurance and compliance operations platform. His global perspective was shaped by early work with Australia’s Department of Defence and management of the Australasian Information Security Evaluation Program. Today, he focuses on continuous assurance, security automation, and compliance engineering.

Stephen Eng

Stephen Eng

Engineering Manager — Persona

Linkedin

Biography

Stephen Eng is an Engineering Manager, focusing on Security and Compliance at Persona, where he leads security architecture and continuous compliance initiatives for Persona’s federal cloud environment. Bringing over a decade of public- and private-sector security experience, including past security engineering roles at NASA and the FDA, Stephen specializes in bridging point-in-time compliance frameworks with automated, continuous security practices. He focuses on operationalizing continuous monitoring, vulnerability remediation at scale, and helping high-growth organizations meet stringent federal security baselines without slowing engineering velocity.

Zach Fasnacht

Zach Fasnacht

Public Sector Product Manager — Vanta

Linkedin

Biography

Zack Fasnacht is a product leader who enjoys solving hard problems, especially when the solution can help the government use technology more securely and effectively.

Zack serves as Public Sector Product Manager at Vanta, where he leads initiatives focused on FedRAMP 20x, federal authorization modernization, AI, automation, and continuous compliance. His work helps cloud providers navigate federal requirements and agencies improve how they evaluate and adopt secure technology.

Before joining Vanta, Zack held technology and product leadership roles at the U.S. Department of Homeland Security and the Library of Congress. At DHS, he was one of 50 AI experts selected to deliver solutions for the department and led the development of DHSChat, its first enterprise generative AI assistant.

Zack brings firsthand experience from both sides of federal authorization, having managed the process inside government and now building products for organizations navigating it. He holds an MBA and is a certified Project Management Professional and AWS Certified Cloud Practitioner. Zack also represents Vanta on the Federal Secure Cloud Advisory Committee.

John Gallagher

John Gallagher​

GRC Technical Lead — OpenAI

Biography

John Gallagher works on U.S. government compliance at OpenAI, with a focus on FedRAMP and DoW cloud security requirements. He previously served as Director of U.S. Government Cloud Compliance for Azure at Microsoft.

Lisa Gold

Lisa Gold

Founder and Principal — GoldStandard Advisors

Linkedin

Biography

Lisa Gold is the Founder and Principal of GoldStandard Advisors, working with financial institutions, fintech and AI companies to build and execute go-to-market strategies and strategically evaluate and adopt technology. Her work spans the intersection of banking and emerging technology.

Lisa’s career includes US Bank, the American Bankers Association and the fintech space, where she has worked as both a co-founder and advisor, giving her firsthand knowledge of how institutions evaluate risk and make technology decisions, what fintechs misread and where go-to-market strategy breaks down before it reaches a decision maker. At the ABA she conducted vendor due diligence on companies seeking bank partnerships, giving her a grounded understanding of how regulatory and compliance considerations shape technology adoption. This experience continues to produce a wide network of trusted relationships across banking and fintech.

Her work is hands-on, selective and grounded in how financial institutions make decisions. In an industry where relationships define outcomes, Lisa has spent her career building them and brings direct access to a broad network of C-Suite banking executives who trust her perspective.

Devin Gordon

Principal Solutions Architect — AWS

Linkedin

Biography

Devin is a principal solutions architect at Amazon Web Services (AWS) supporting federal civilian agencies. He specializes in security at AWS and is passionate about helping customers implement secure environments while enabling the use of emerging technologies. He enjoys travel, especially SCUBA diving, hiking, and other outdoor pursuits.

Daniel Gorfine

Daniel Gorfine

Senior Advisor — Cloud Service Providers – Advisory Board (CSP-AB)

Linkedin

Biography

Daniel Gorfine is the founder of Gattaca Horizons, a boutique advisory firm. Daniel also serves as an Adjunct Professor of Law at the Georgetown University Law Center, has taught at the Paul H. Nitze School for Advanced International Studies (SAIS) at Johns Hopkins University, and is a co-founder of the non-profit Digital Dollar Project. Daniel is senior policy advisor to the Financial Technology Association (FTA) and Cloud Service Provider-Advisory Board (CSP-AB). He also holds positions on the Boards of the Fintech Foundation, FinRegLab, and Futures Industry Association (FIA). He previously served as the U.S. Commodity Futures Trading Commission’s (CFTC) first Chief Innovation Officer and Director of LabCFTC.

Prior to the CFTC, Daniel was an executive at a leading fintech company, led financial market policy work at a Washington, D.C. think tank, and earlier in his career was an associate at Covington & Burling LLP. Daniel also served a clerkship with U.S. District Court Judge Catherine C. Blake in the District of Maryland.

A graduate of Brown University (A.B.), Daniel holds a J.D. from George Washington University Law School and an M.A. from SAIS.

Marshall Gray

Marshall Gray

Senior Manager — Coalfire

Linkedin

Biography

Marshall Gray is a Senior Manager at Coalfire, where he oversees some of the firm’s largest Hyperscale assessment portfolios across FedRAMP Moderate/High and DoD IL4/IL5. Over nearly a decade in cloud security compliance, he has led end-to-end delivery on FedRAMP and DoD authorization engagements, from control interpretation and testing through client communication and deliverable quality, while building and developing a team of assessment professionals. His current focus includes navigating the FedRAMP 20x/CR26 transition, the widening gap between FedRAMP and DoD SRG requirements and exploring how automation through build pipelines and policy-as-code can move compliance teams from static documentation to continuous authorization. Certifications: CISA, BCR, AWS CCP, CCSK

Edward Graham

Edward Graham

Managing Editor — NextGov/FCW

Linkedin

Biography

Coming soon…

Gary Guercio

VP of Operations — Fortreum

Linkedin

Biography

Gary Guercio is a Governance, Risk management and Compliance (GRC) professional with over 20 years of cybersecurity assessment and advisory experience. Federal Risk and Authorization Management Program (FedRAMP) Subject Matter Expert (SME) including the last 12 years in direct support of the FedRAMP program across three leading 3PAO’s. Over his career he has delivered FISCAM, FISMA, HIPAA, HiTRUST, ISO, SOC, SOX, and various other assessment and advisory services. He is a results-oriented leader responsible for the overall success of Fortreum services and products to include the FedRAMP Independent Assessment Services, the CMMC Certified Third-Party Assessment Organization (C3PAO) practice, the ISO certification body, CPA affiliate, all technical testing and advisory support services.

Nic Hall

Nic Hall

Technical Program Manager — Wiz

Linkedin

Biography

Nic Hall is a Technical Program Manager on the Wiz Public Sector compliance team, specializing in Department of War CSP authorizations. Before joining Wiz, Nic led IL5/L6 compliance efforts at Zscaler and VMware. A former U.S. Marine and DoW Civilian ISSM, Nic brings a mission-driven perspective to the intersection of compliance, technology, and national security.

Mitch Herckis

Mitch Herckis

Global Head of Government Affairs — Wiz

Linkedin

Biography

Mitch Herckis is Global Head of Government Affairs for Wiz, a cloud cybersecurity company. Prior to joining Wiz, Mitch served as Branch Director for Federal Cybersecurity at the White House Office of Management and Budget, where his team led implementation of the Executive Order on Improving the Nation’s Cybersecurity on behalf of the Office of the Federal CIO.

Before joining federal service, Mitch served as a Senior Advisor for New York City Cyber Command, driving cybersecurity implementations across 100+ agencies, and leading public initiatives to increase the digital security of City residents. Mitch also led federal technology policy and advocacy efforts for the National Association of State Chief Information Officers and National League of Cities.

Dale Hoak

CISO — RegScale

Linkedin

Biography

Dale Hoak is a results-driven cybersecurity leader who has delivered measurable impact across the U.S. Navy, law enforcement, and corporate sectors. As CISO at RegScale, he secured critical certifications—including SOC 2, FedRAMP High, and CSA STAR—enabling expansion into regulated markets. His AI-driven security automation enhanced compliance capabilities and unlocked over $1M in additional revenue. At the NYPD, he established the first fully operational Security Operations Center (SOC), slashing incident response times. Previously, he led global cybersecurity transformations, securing 45K+ endpoints and managing 37 major security events. Dale excels at aligning security with business growth, ensuring resilience in high-stakes environments.

Matt Hungate

Matt Hungate​

Managing Principal — Schellman

Linkedin

Biography

Matt Hungate is a Managing Principal with Schellman based in Richmond, VA. Matt specializes in Federal Assessments at Schellman, including compliance with standards such as FedRAMP, GovRAMP, CMMC, and FISMA. Prior to joining Schellman in 2019, Matt worked as a Cybersecurity Consultant for a large advisory firm where he specialized in strategy and assessment services for the Department of Defense. Matt’s credentials include the CISSP, CISA, and CPA.

Kylie Hunter

Kylie Hunter

Solutions Advisor — RegScale

Linkedin

Biography

Kylie Hunter leads customer implementations at RegScale, where she also helps shape the company’s FedRAMP 20x and CR26 offerings. Much of her day-to-day is the subject of this panel: helping cloud providers make sense of the Consolidated Rules for 2026 and decide how to adopt them, and helping teams move from maintaining compliance documentation to continuously proving security. She comes to that work from nearly two years at the FedRAMP PMO, arriving in the weeks after M-24-15 was published and staying through much of the transformation that followed. She is proud to have played a small part in strategizing and carrying out Phase One of what is now FedRAMP 20x, and contributed to the redesign of the FedRAMP website and Marketplace along the way. Some attendees may recognize her from the early automating assessments working group sessions. Earlier, as a Solutions Engineer at Salesforce, she supported customers in highly regulated environments. Having watched the program change shape several times in two years, she is more interested in what makes a transition stick than in what makes it fast.

Chris Johnson

Chris Johnson

Chief Technology Officer — Knox Systems

Linkedin

Biography

Chris Johnson is the Co-Founder and Chief Technology Officer of Knox Systems, a technology company pioneering secure, compliant cloud services purpose-built for the federal sector. At Knox, Chris leads the design and development of the Knox Cloud — a fully automated boundary framework that accelerates authorization and continuous monitoring across the three major hyperscalers, AWS, Azure, and GCP.

With over two decades of experience spanning DevSecOps, cloud infrastructure, and cybersecurity compliance, Chris has helped transform how agencies and SaaS providers achieve and maintain FedRAMP authorization. Under his leadership, Knox has developed advanced automation capabilities that reduce authorization timelines, unify control inheritance, and integrate directly with assessment tools and continuous monitoring pipelines.

Chris also oversees the company’s KnoxAI initiative, an applied research and engineering program focused on AI-driven compliance automation. KnoxAI integrates LLM-based agents and knowledge retrieval models to analyze configurations, assess risks, and generate evidence artifacts mapped to NIST 800-53 and FedRAMP controls. This capability forms the foundation of Knox’s next-generation compliance engine, enabling faster, data-driven ATO decisions.

Prior to co-founding Knox Systems, Chris served as Chief Services Officer at CoSo Cloud, where he led managed services, cloud operations, and large-scale FedRAMP deployments for major federal agencies and enterprise partners. His background combines deep technical expertise with a practical understanding of federal authorization processes, bridging the gap between innovation and compliance.

Chris is a recognized voice in the GovCloud and compliance automation community, contributing thought leadership on topics such as continuous authorization, secure boundary orchestration, and AI governance for regulated environments.

Kristine Lam

Kristine Lam

Executive Director — Cloud Service Providers – Advisory Board (CSP-AB)

Linkedin

Biography

Kristine is the Executive Director of the Cloud Service Providers Advisory Board (CSP-AB), a trade association representing the world’s premier cloud companies in order to advance policies and standards that empower secure, scalable, and impactful cloud adoption across the public and private sectors.

Most recently, Kristine spent four years in the Office of the Federal Chief Information Officer at the U.S. Office of Management and Budget (OMB) where she worked on efforts to increase cloud adoption, drive IT modernization, and secure Federal networks. Kristine focused on governmentwide initiatives to streamline and improve technology adoption and strengthen cybersecurity at Federal agencies. In particular, Kristine engaged with stakeholders at Federal agencies and in the private sector to modernize the Federal Risk and Authorization Management Program (FedRAMP), focusing on the secure adoption of cloud technologies and reuse of FedRAMP authorized products. She also led a team that provided strategic direction and advised the Federal CIO on engaging with Congressional committees and Members of Congress.

Prior to her time at OMB, Kristine spent over a decade working in Congress as a professional staff member and policy advisor on the Senate Homeland Security and Governmental Affairs and the House Oversight and Government Reform Committees, which have jurisdiction over governmentwide IT and cybersecurity issues. On the Hill, Kristine played a key role in crafting policies on matters from government procurement to technology and digital transformation and developing strategies to enact legislative priorities for Members of Congress.

Kristine holds a Bachelor’s degree in Political Science and American Studies from the University of Notre Dame.

Josh Magri

Josh Magri

CEO — Cyber Risk Institute

Linkedin

Biography

Josh Magri currently serves as the Chief Executive Officer of the Cyber Risk Institute. Previously, he served as Senior Vice President and Counsel for Regulation and Developing Technologies at Bank Policy Institute (BPI)/BITS. In this role, Mr. Magri oversaw regulatory, advocacy, and policy efforts on issues related to cybersecurity, data security and privacy, financial technology (“FinTech”), and developing technologies.

Prior to joining BPI, Mr. Magri was the Associate Vice President at the Internet Security Alliance, a multi-sector cybersecurity trade association, where he co-authored the National Association of Corporate Directors’ (NACD) “Cyber-Risk Oversight Handbook.” He also helped develop cybersecurity policy that was largely incorporated into Presidential Executive Order 13636 – Improving Critical Infrastructure Cybersecurity.

Before moving to the Washington area, Mr. Magri was a prosecutor in the Bronx County District Attorney’s Office. Tenured in both the Appeals and Rackets Bureaus, he handled felony and misdemeanor investigations, prosecutions, and appeals.

Mr. Magri graduated Boston College with a B.A. in Economics and earned a J.D. from Boston College Law School. Following law school, he clerked for the Honorable Fernande Duffly at the Massachusetts Appeals Court.

Drew Myklegard

Drew Myklegard

Executive Director of Government Programs — Carahsoft

Linkedin

Biography

Drew Myklegard serves as Executive Director of Government Programs at Carahsoft, where he draws on a deep background in federal technology leadership to connect innovative vendors with the agencies that need them. His work focuses on accelerating digital modernization across the Public Sector and ensuring that government customers can readily access the tools required to deliver on their missions.

Prior to joining Carahsoft, Drew served as Deputy Federal Chief Information Officer in the White House Office of Management and Budget (OMB). In that role he helped shape federal IT strategy and oversight across the executive branch, with portfolio responsibility spanning more than $120 billion in annual federal technology spending. His priorities centered on improving mission delivery, raising the bar on modernization, and driving consistent technology standards governmentwide.

Earlier in his career, Drew led several transformation efforts at the U.S. Department of Veterans Affairs, including the development and launch of the Lighthouse API Platform — a foundational capability that opened VA data and services to veterans, developers, and partner organizations through modern, secure interfaces. That work is widely credited with helping reshape how the VA delivers digital services.

Mike Kim

Mike Kim

CEO & Co-Founder — Mycroft

Linkedin

Biography

With 12+ years in cybersecurity, Mike (CISA) has deep domain experience as a practitioner and a track record of scaling SaaS companies and professional service firms, from pre-seed to F500.

Irfan Nawaz

Irfan Nawaz

Senior Director, Government Technology Accreditation  — Salesforce

Linkedin

Biography

With more than 17 years of experience in the public sector and deep expertise in cloud security and compliance, Irfan leads Salesforce’s accreditation activities across federal civilian agencies, the Department of War, and the Intelligence Community. His leadership ensures that Salesforce GovCloud maintains the highest standards of security and compliance while enabling digital transformation across some of the most regulated and mission-critical environments in the world. His work has played a vital role in accelerating cloud adoption across federal agencies, helping to build trust and operational excellence in modern government infrastructure.

Ross Nodurft

Ross Nodurft

Executive Director — Alliance for Digital Innovation

Linkedin

Biography

Ross Nodurft is the Executive Director of the Alliance for Digital Innovation (ADI), a coalition of technology companies focused on bringing commercial, cloud-based solutions to the public sector that can enable a modern, secure, digital government. ADI focuses on promoting polices that enable IT modernization, cybersecurity, smarter acquisition, and workforce development. Prior to joining ADI, Ross spent several years working with industry partners on technology and cybersecurity policy and spent several years in government both in the executive and legislative branches. Having served as principal of Risk Management and Government Solutions at a digital identity and cybersecurity firm and chief of the Office of Management and Budget’s (OMB) Cyber Team in the White House overseeing federal government cybersecurity policy and federal agency incident response, Ross has significant experience on advising ADI member companies on how to navigate issues at the nexus of homeland security, technology, and cybersecurity policy.

In his role at OMB, Ross worked closely with the Office of Federal Procurement Policy (OFPP) on supply chain and acquisition policy and with the Office of Information and Regulatory Affairs (OIRA) privacy office on technology policy and breach response. He also led efforts to modernize federal IT systems and modernize risk management practices to ensure secure infrastructure across the federal government.

Ross has served as a legislative director for a U.S. House of Representatives member, where he managed voting for all of the economic, defense, and homeland security policy; wrote, edited, and introduced legislation focused on information sharing liability protection and critical infrastructure development; and developed the strategy for the introduction, debate, and adoption of all legislative priorities. He was also a senior policy advisor for a U.S. senator, where he negotiated inclusion of legislative language in both appropriation and authorization bills focused on homeland security, technology, and economic policy; built strong relationships with the Departments of Commerce and Homeland Security while advocating on behalf of large and small ISPs for internet and data security reforms; and, in collaboration with Homeland Security Appropriations staff, helped to craft key policy decisions, including the inclusion of full funding for cyber education. Earlier in his career, Ross was a professional staff member with the U.S. Senate Committee on Small Business and Entrepreneurship, where he started the cybersecurity/IT portfolio in the Small Business Committee, negotiated numerous budget and tax amendments, and drafted legislation authorizing Small Business Administration programs for disabled and minority veterans groups.

Lee Neeper

Lee Neeper

Director of Quality Management — A-LIGN

Linkedin

Biography

Lee Neeper is a Federal Director at A-LIGN, a leading cybersecurity compliance and audit firm, where he draws on over 15 years of federal cybersecurity experience to advise cloud service providers and defense contractors on FedRAMP, CMMC, and related certification frameworks. His work spans technical compliance strategy and business development, helping organizations translate complex regulatory requirements into practical paths to authorization.

Beyond client advisory work, Lee is active in federal cybersecurity policy, participating in Capitol Hill discussions on FedRAMP reauthorization and contributing to the drafting of the next FedRAMP Authorization Act. He brings a rare combination of hands-on compliance expertise and policy-level perspective to the future of federal cloud security and defense industrial base requirements.

Ken Palmer

Ken Palmer

Engineering Manager — Confluent

Linkedin

Biography

Ken Palmer is an Engineering Manager at Confluent, now part of IBM, who leads the 20x Compliance Engineering, BCP/DR, and FedRAMP SRE Operations. He has over 14 years of experience across different facets of tech such as IT, Operations, Release Engineering, SRE, and Management. His tenure at Confluent has taken him from building a team from the ground up and implementing SRE principles and procedures, to pivoting off a Rev5 Ready designation and delivering on the 20x pilot program as one of the first CSPs selected.

Mike Schreiner

Mike Schreiner

COO — Paramify

Linkedin

Biography

Mike Schreiner is a business leader, entrepreneur, investor, and currently Chief Operating Officer at Paramify, a platform that simplifies risk management and streamlines compliance across frameworks like FedRAMP, CMMC, GovRAMP, and more. Paramify helps teams continuously plan, implement, report, and monitor their security programs, reducing complexity, saving time, and improving audit outcomes.

Nino Scimemi

Nino Scimemi

Vice President of Security Operations — Knox Systems

Biography

Nino Scimemi is Vice President of Security Operations at Knox Systems, where he leads security operations for mission-critical federal cloud environments. He has more than 25 years of cybersecurity and IT operations experience across the Marine Corps, DHS and federal enterprise environments. Nino recently served as Acting Deputy CISO for DHS and previously led Marine Corps defensive cyber operations, network operations, emergency response, and red team engagements.

Kenny Scott

Kenny Scott

Founder & CEO — Paramify

Linkedin

Biography

Kenny Scott is the Founder and CEO of Paramify, a platform that automates modern security and compliance package management for enterprise organizations. Two decades across audit, GRC, and security engineering have given him a deep appreciation for the many ways the same control can be documented.

Will Shah

Will Shah

Technical Program Manager — Google Cloud

Linkedin

Biography

Will Shah is a Technical Program Manager for Google Cloud, leading Public Sector AI compliance and Department of War compliance. He previously led state and local compliance (including CJIS and IRS 1075) and supported Google’s Phase One proposal for FedRAMP 20x. Prior to joining Google in January 2022, Will worked at Easy Dynamics, supporting DHS, GSA, and private sector FinTech clients. He has also worked at the Johns Hopkins Medicine Technology Innovation Center.

Will lives in the DC area and holds a Bachelor’s Degree in Computer Science and a Master’s Degree in Business Administration, both from the University of Maryland.

Isaac Teuscher

Isaac Teuscher

Senior Security Engineer — Paramify

Linkedin

Biography

Isaac is a Senior Security Engineer at Paramify, leading the technical implementation of cloud and AI-driven security initiatives. His work focuses on cloud-native environments, including infrastructure hardening, Kubernetes deployments, and SIEM integration for continuous monitoring. He also manages corporate cybersecurity functions such as risk management, compliance, and endpoint security, supporting initiatives aligned with NIST 800-53 and FedRAMP. Isaac collaborates with executive teams to build practical, scalable security programs that meet the highest federal compliance standards.

Recently, Isaac helped design and implement Paramify’s AWS GovCloud environment, enabling the company to reach FedRAMP High Ready status in under four months. He also led FedRAMP 20x pilot programs leading to one of the first FedRAMP 20x Moderate authorizations. His approach prioritizes real security over checkbox compliance by applying risk-based hardening, threat modeling, and automation to ensure systems are both secure and audit-ready. He has been invited to speak on panels, webinars, podcasts, and at national conferences on risk management and compliance automation.

Rene Tshiteya

Senior Director, Cybersecurity & Compliance — stackArmor

Linkedin

Biography

Rene Tshiteya is Senior Director of Cybersecurity and Compliance at stackArmor, where he leads cloud security and authorization strategy for commercial cloud organizations pursuing and maintaining FedRAMP and DoD authorizations. Previously, he served in the FedRAMP Program Management Office as GSA Deputy Team Lead for the Joint Authorization Board (JAB) and as Automation Lead, giving him experience from both the government and cloud service provider perspectives. Rene actively collaborates with government and industry to advance FedRAMP modernization, compliance automation, and continuous authorization. He is passionate about helping agencies and cloud providers strengthen security while making compliance more security-focused, efficient, and scalable through automation.

Matthew Venne

Matthew Venne

CTO — stackArmor

Linkedin

Biography

Matthew Venne is CTO and Distinguished Engineer at StackArmor, a subsidiary of Quantum Sky, where he leads 40+ engineers across AWS, GCP, and AI innovation. He is Chief Architect of record on three FedRAMP-authorized systems and technical SME on 20+ others, His current work centers on FedRAMP vulnerability disposition: a five-paper methodology series introducing PAIN, a deterministic, CVSS-Environmental-derived severity model that replaces subjective deviation requests with derivation logic locked before the scan and auditable by the AO.

Ben Ware

Ben Ware

Head of Public Sector Compliance — Oracle

Linkedin

Biography

Ben Ware leads the SaaS Public Sector Compliance organization and serves as the Deputy Executive Owner of Oracle’s US Public Sector SaaS Clouds. He has more than 17 years of cybersecurity, compliance, and investigation experience. Ben’s team works with government regulatory entities to obtain relevant certifications and authorizations for Oracle’s Cloud applications. The team also supports sales and pre-sales teams in conversations with current and prospective customers about Oracle’s SaaS security and compliance posture.

Prior to joining Oracle in 2017, Ben spent nearly ten years at PricewaterhouseCoopers (PwC), where he was the Head of Information Security for PwC Public Sector. At PwC, Ben served in various roles, including Interim CISO for PwC Public Sector, CISSM/ISSM for NISP & ICD programs, and IAM/ Contract Program Security Officer (CPSO) for JSIG programs.

Ben holds a bachelor’s degree from Radford University. Ben currently holds a TS clearance.

Robert Wilkinson

Robert Wilkinson

Lead Security Compliance Analyst — FedHIVE

Linkedin

Biography

Coming soon…

Morgan Kaplan

Head of Public Sector — Vanta

Linkedin

Biography

Morgan Kaplan is the Head of Public Sector at Vanta, leading the delivery of AI and automation-based GRC solutions to Federal, SLED, and industry end-users. Working at the intersection of public policy and technology modernization, Morgan has a strong passion for how advanced software, AI systems, and emerging technology can have a positive impact on government, business, and societal outcomes at-large.

Prior to Vanta, Morgan was a Senior Policy & Communications Lead at Palantir Technologies, a Fellow at the Carnegie Endowment for International Peace, the Executive Editor of the quarterly journal “International Security” at the Harvard Kennedy School, and before that an academic focused on the foreign policies of rebel groups. Morgan holds a Ph.D. and M.A. in political science from the University of Chicago, as well as a B.A. in International Affairs from the George Washington University.

Pete Waterman

Pete Waterman

Director, FedRAMP — General Services Administration (GSA)
Linkedin

Biography

Pete brings decades of experience in the development and adoption of technology services in both the private and public sector.

He joined federal service in 2019 with the US Digital Service where he became deeply familiar with the complex web of laws, regulations, policies and standards that make deploying technology in government entirely different from the private sector. Prior to public service, he led engineering teams that delivered internet based services at various size software companies.

Outside of work, Pete likes to explore and has traveled across much of the world by motorcycle or other vehicles – he once turned down a reality tv show because it would limit his ability to just go where the road takes him.