Rob Arnold

Senior Cyber Risk Management Archiect

Rob Arnold's profile photo
LocationWinsto-SalemNorth Carolina, United States
Government service2yrsCybersecurity and Infrastructure Security Agency (CISA)

About

Rob Arnold is a retired Senior Advisor for Cybersecurity and Risk Management at the National Risk Management Center, a division of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA). Among his many projects, he spearheaded the establishment of the first National Critical Functions Risk Register, which assists senior government leaders in prioritizing and coordinating risk management objectives across the entire government ecosystem.

Before joining the National Risk Management Center, Arnold served as the CEO of Threat Sketch, a data and analytics firm that specializes in addressing large-scale cyber risk management challenges. He completed his graduate studies in information security at East Carolina University and holds a certification in risk and information systems control from ISACA. Arnold is also the author of Cybersecurity: A Business Solution, a definitive guide to managing cyber risk in small organizations. His career accolades include representing the interests of small organizations before Congress, participating in key Homeland Security events, serving as a founding member of the ICT Supply Chain Task Force Executive Council, acting as the first chairman of the North Carolina Center for Cybersecurity, and serving on advisory boards for the University of North Carolina at Greensboro, Forsyth Technology Community College, and the University of North Carolina at Wilmington.

Roles

Jul 2020–Jan 2022
Former role

Senior Cybersecurity and Risk Management Advisor

Cybersecurity and Infrastructure Security Agency (CISA), National Risk Management center

Subject matter expert to the National Risk Management Center on the evaluation, design and development of cyber risk management methodology, tools, and implementations thereof. Among other accomplishments I lead the development of the first ever National Critical Functions Risk Register - a government wide initiative to coordinate risk management across the Federal sphere. I also served as the government co-chair of the Small- Medium-Business Working group of the ICT Supply Chain Risk Management Task Force.