Randy is a Principal Researcher, Deputy Director of the Cyber Risk and Resilience Directorate at CERT, and the Director of the CERT National Insider Threat Center at Carnegie Mellon University's Software Engineering Institute. Randy has over 30 years of managerial and technical experience in the information technology domain, including information security risk management, insider threat mitigation, cybersecurity assessments, software engineering, project management, and database design, development, and maintenance.  Randy, and the teams he leads, assist organizations in improving their security posture and incident response capability by researching technical threat areas; developing and conducting information security assessments; and providing information, solutions and training for preventing, detecting, and responding to illicit cyber and physical activity.
 
In addition to his role with CERT, he also has a dual appointment as Program Director for the Masters of Science in Information Security Policy and Management (MSISPM) program and CERT professor at Carnegie Mellon’s Heinz College, Graduate School of Information Systems and Management, at Carnegie Mellon University. He is the primary advisor for all students in the MSISPM Program and he teaches various graduate-level courses for the MSISPM and MISM programs and is an instructor for the CISO and CIO executive education programs in the Heinz College.
 
Prior to his career at Carnegie Mellon, Randy worked for Software Technology, Incorporated (STI) in Alexandria, Virginia. For nine years, he was a consultant to the Naval Research Laboratory (NRL) working on numerous projects designing, building, and supporting large-scale relational database management systems and executive management systems. During his employment with STI, Randy also filled the role of Information Systems Business Manager.
 
Education
University of Maryland, M.S. in Business Management
Geneva College, B.S.B.A. in Management Information Systems, B.A. in Business Administration