
Chief Information Security Officer, Published Author & Advisor
Richmond, Virginia Area

Chief Information Security Officer, Published Author & Advisor
Richmond, Virginia Area
Rick Lawhorn CISSP, CISA has served as the Chief Information Security Officer (CISO) for two Fortune 100 companies and served in information technology/security leadership roles with multiple law firms and the National White Collar Crime Center. He has over 19 years of information technology and security experience and has been published in numerous domestic/international security magazines. Currently, he’s serving on several advisory boards and as a security expert for a New York based law firm focusing on consumer privacy rights.
Publications:
2009
CBS News: When Thieves Order Off The Menu
CSO & Storefrontbacktalk: Drive Thru Security
Infoworld/Networkworld: Security in the Cloud
CSO Online: DLP- 5 Ways Employees Spill Sensitive Data
iKeepSafe: Parental Controls
iKeepSafe: Security Basics for Parents
CSO Magazine Podcast: Deconstructing DLP
TechTarget: Hotel & Resort Security
2008
TechTarget: PCI 1.2: Seven key changes
CSO Magazine: Internet Safety for Kids
TechTarget: Key Risk Terms & Third Party Assessments
TechTarget: Success in vulnerability assessments
CIO Magazine: Data Breach Fallout
TechTarget: Privileged password management
TechTarget: Foundation for role entitlement
CSO Magazine: Do CISOs Need Legal Protection?
TechTarget: Protecting PCI Assessments
TechTarget: Rethinking risk management
TechTarget: How to discover M&A security posture
TechTarget: Perplexity in protecting PIFI
TechTarget: A path to destruction
CSO Magazine: Does Internet Terrorism Exist?
(IN)SECURE Magazine: Internet Terrorism
(IN)SECURE Magazine: A Security Focus on China BPO
Information Security Mag: Pandemic Pitfalls
SC Magazine: Raising the ante on anti-virus tools
SC Magazine: Reduce risk through vendor onus
Broadcasts:
iKeepSafe - 5 instructional videos for Internet Safety
http://www.youtube.com/watch?v=7R9_TLJ7se8
"TechForum LIVE!"
Auditing Application Security
Insider Threats:Know Thy Enemy
Risk Management, Information Security, eCommerce Systems, Outsourcing Management, Information Systems Audit, Qualitative and Quantitative Risk Management Strategies, Incident Response, Legislative Compliance, Payment Card Industry (PCI) Data Security Standard (DSS), HIPAA, Security Awareness, Vulnerability Assessments, Internet and Network Security, Firewalls, ISO 17799/27001, Physical Security, Business Continuity Planning, Project Management, eDiscovery, Certification and Accreditation,
(Government Administration industry)
September 2009 — Present (3 months)
(Non-Profit Organization Management industry)
October 2008 — Present (1 year 2 months)
(Privately Held; 51-200 employees; Computer & Network Security industry)
September 2008 — Present (1 year 3 months)
(Security and Investigations industry)
July 2008 — Present (1 year 5 months)
(Law Practice industry)
May 2008 — Present (1 year 7 months)
(Information Technology and Services industry)
September 2000 — Present (9 years 3 months)
(Public Company; MO; Consumer Goods industry)
February 2009 — August 2009 (7 months)
(Public Company; 5001-10,000 employees; GNW; Financial Services industry)
April 2004 — May 2007 (3 years 2 months)
(Public Company; 5001-10,000 employees; GE; Financial Services industry)
April 2002 — April 2004 (2 years 1 month)
(Public Company; 10,001 or more employees; GE; Insurance industry)
March 1998 — April 2002 (4 years 2 months)
(Privately Held; 1001-5000 employees; Legal Services industry)
March 1994 — March 1998 (4 years 1 month)
(Government Agency; 51-200 employees; Judiciary industry)
March 1992 — March 1994 (2 years 1 month)
I am really into home automation and audio/video distribution systems. I dabble with X10 technology and assist with designing/building 80's arcade systems.
CISSP, CISA, CHP, CHSS, TNCP, APWG (http://antiphishing.org), WASC (http://www.webappsec.org), The Ladders, Search Security, CISO Meaningful Metrics, Common Friend, OWASP, Linkedin
CISSP, CISA, CHP, CHSS, TNCP certifications
Symantec Technical Specialist
Genworth Founders Award
GE Capital Pinnacle Award
GE Capital Everest Award
GE e-Mentor to GE Financial Assurance CEO
GE Capital High Performance Award
GE Stock Award Recipient
GE Capital Management Awards
Peer Recognition & Management Awards
Advisory Board Member: iKeepSafe.org - Internet Safety
Advisory Board Member: Codenomincon
Advisory Board Member: Custos Technologies
Advisory Board Member: PacketMotion