ºÚÁÏÉçÇø

This isÌýkind of aÌýfull-circle moment for you, isn’t it?

Absolutely. I remember being in Iraq and seeing UMGC there back in 2005, 2006, and I remember thinking,Ìý‘Wow, you can take college classes here.’ÌýAnd so, I knew that t ºÚÁÏÉçÇø was a university that serves learners not only during peacetime, but alsoÌýinÌýwar. And when I was stationed back in Okinawa again, I started teaching in the MBA program. So, I have history withÌýthe university, andÌýit’sÌýbeen part of my DNA for a long time. And UMGC has always been at the forefront of cybersecurity.

How did you get started in cybersecurity and your focus on human factors, or how people’s behaviors, limitations and weaknesses affect security?

I was a naval aviator in the military, and I went to Aviation Safety Officer School, and we had a course on human factors.ÌýAnd from the moment that I started taking that course,ÌýI'veÌýjust totally been enthralled with human factors as a discipline, as a profession, as a science, andÌýI'veÌýnever left it.

One of the things that really lit that fire is their laboratory, which was a warehouse of wreckedÌýaircraft. The instructor would give some of the background about the crash and say, ‘Tell me what you think happened here.’ And I raised my hand and said, 'These two [pilots] were dogfighting,' because I was around the sameÌýageÌýand I know what we do, right? And he said, 'You’re absolutely correct.’Ìý

How do you impart that to your students? How do you light the same fire that was lit in you?

Teaching human factors in cybersecurity is still in the infancy stage. I helped develop that course here at t ºÚÁÏÉçÇø and at two other universities, and we used to say,Ìý'Humans are the weakest link,'Ìýbut that narrative gets old. And so now we say that humans are one of the major vulnerabilities in cybersecurity, because of the variability in the human element. We are all different, and so we might react to things differently. The stress, the onset of fatigue, the onset of burnout, you know, those factors weigh differently on each one of us. I really try to help people understandÌýthe human element. And then I also try to help people understand thatÌýwe'reÌýgoing to make errors no matter what, becauseÌýwe'reÌýhuman.Ìý

I try to help our students think about and understand how we can build systems by intentionally designing them for the people that operate them, whether it's in a cybersecurity system, whether it is someone working in human resources who's going to be complying with a cybersecurity policy, or whether it's somebody working in logisticsÌýwhoÌýhas to comply with an information security policy. How do weÌýanticipateÌýhow a system is going to be attacked—which might be different from the way another system might be attacked?ÌýI ask students to think multi-dimensionally about how all these problems come together and how you solve them likeÌýan investigator.

How did you transition from the Navy to the banking world, and how did that inform what youÌýteachÌýyour students?

When I retired from the military, I said,Ìý‘You know what, I always wanted to work in corporate America.’ÌýI was at a conference speaking on a panel and one of the vice presidents from Wells Fargo came up to me and said,Ìý‘Hey, we’re looking for people like you.’ÌýWhat made me such a great prospect for the banking industry was the cybersecurity work I did when I was in the military.ÌýI'veÌýalways been nosy—I call it curious, but some people call it nosy. At Wells Fargo, I always got to put my nose inÌýthe business.ÌýAnd late one night, I was at home, and I was looking at some security controls and mapping them to industry standards, and I found two gaps.ÌýIÌýimmediatelyÌýnotified my boss and made recommendations to close them. A little while after that, he told me they did have someone get into the bank system through one of the places IÌýidentified. And because I was able to find that gap, the damageÌýwasn’tÌýas bad as it could have been.Ìý

And so nowÌýyou'reÌýin academia and passing that knowledge on.ÌýWhat’sÌýthe most important thing for learners to know?

One of the things thatÌýwe'reÌýseeing in industry right nowÌýisÌýthat the entry level position is beginning to become obsolete becauseÌýeverybody'sÌýusing AI. My challenge is to take college students and adult learners and advance them from zero to the equivalent of two or three years of experience. This is why we are doing more project-based work, more experientialÌýleaning, more hands-on activity.Ìý

I encourage students to have an insatiable appetite forÌýinformation, becauseÌýyou grow.ÌýI always tell students, when I went to Wells Fargo, I said I never wanted to do application development.ÌýAnd I was able to steer away from application development for the first two years, but then I got the call to take it over. And it was a heavy lift. It wasÌýa very hardÌýjob. But I enjoyed it because I got to learn the bank very, very well.

Ìý

There’sÌýa real balance there between being an insatiable learner, taking every opportunity you can, contrasting with stress,ÌýfatigueÌýand burnout, which is an area whereÌýyou’veÌýdone pivotal research. How do you help learners find that balance?

We will always have stressors in our life, whetherÌýit'sÌýfrom dealing with a sick parent or child, financial stress, or even ifÌýyou'reÌýjust living life andÌýyou'reÌýjust not feeling like life is treating you very well. The military is an environment whereÌýit’sÌýinherently stressful and fatiguing.Ìý

I thinkÌýit'sÌývery importantÌýthat we design our programs with the learners in mind so they can be successful. Give them the resources they need, put everything within reach so they can attend class without distraction.Ìý

And nowÌýyou’veÌýreceived the Baldrige Award. Tell me about what that recognition means to you.Ìý

I'llÌýbe honest, I was very shocked to get that call. ThereÌýareÌýprobably lessÌýthan 20 people in cybersecurityÌýwhoÌýhave received it. And when you look at some of the people who won inÌýthe variousÌýcategories,Ìýthey’reÌýfamous people in their fields.ÌýI'mÌýjust so honored to be recognized for a lifetime achievement of working in cybersecurity and making places better.ÌýThat'sÌýmy goal—I wouldÌýlike forÌýthe organization to be better. It was that way when I was in the military. It was that way when I was at Wells Fargo, andÌýit’sÌýthat way here at t ºÚÁÏÉçÇø. How do I make it better?Ìý

LearnÌýmore aboutÌýcybersecurity programsÌýat t ºÚÁÏÉçÇø.Ìý