The EnergySec Board of Directors is currently made up of seven directors. The role of the Board of Directors is to support the EnergySec mission and vision as well as to provide guidance and oversight to the EnergySec executive team.
Patrick Miller - Chairman of the Board
Patrick Miller is a security executive who has dedicated his career to the protection and defense of the nation’s critical energy infrastructure. He is the founder of EnergySec, and currently its President and CEO. This nonprofit information sharing organization began as a few colleagues meeting for lunch and has grown into a nationwide effort to promote sound security principles in the energy industry.
One of his strengths is the diversity of his professional experience. In Energy, he has held positions with a utility, a regulator, and a private consulting firm. He has also held key positions in the Insurance, Internet and Telecommunications sectors.Among other credentials he holds the CISA, CRISC and CISSP certifications.
Patrick is an active member of several critical infrastructure security working groups and a sought after speaker and industry expert on the subjects of critical infrastructure protection, process control system security, regulatory compliance, audit, and privacy.
Bob McCarthy
Bob has held the positions of Vice President of Finance and Chief Financial Officer of Tripwire, Inc. from November 1999 thru May 2011. In May 2011 Tripwire was acquired and Bob left the Company. During his tenure Bob was responsible for Finance, HR, IT and Operations. Tripwire grew from approximately 50 employees to 350, and grew annual revenues from $1 million to $90 million. Bob was involved in raising venture capital over a number of financings and negotiating operating lines of credit and term loans.
Prior to joining Tripwire in 1999, Bob had been CFO of several development stage software companies in the Portland area including Quantitative Technology Corporation, CAChe Scientific, which was acquired by Oxford Molecular Group, and Eagle Design Automation, which was acquired by Synopsys. Bob received his BS from the University of San Francisco and his MBA from Golden Gate University.
Chris Peters
Christopher Peters is vice president of critical infrastructure protection at Entergy. In this role he oversees cyber security of Entergy’s electric system to protect its reliability.
His professional experience includes serving as vice president of cyber security solutions for ICF International where he led the startup of ICF’s cyber security business unit. Mr. Peters also is a retired United States Marine Corps Reserves intelligence officer.
He received a master’s degree in the management of information technology from the University of Virginia’s McIntire School of Commerce and a bachelor’s degree in sociology from Greenville College. Mr. Peters also holds a certification as an information security manager from the Information Systems Audit and Control Association and a certification as an information privacy manager from the International Association of Privacy Professionals.
Ed Croft
Ed Croft is a network security professional who specializes in security and compliance solutions that blend seamlessly with operations. Currently, he is the manager of Electric Compliance & Regulatory Audits at Puget Sound Energy (PSE) in Bellevue, Washington. He has oversight of PSE’s NERC compliance program and works with operations, security, and information technology to help those groups integrate compliance into the company’s overall goals.
Prior to entering the utility sector 12 years ago, Ed specialized in network design and integration for solution providers. He personally implemented secure network solutions for over one hundred different companies. In his free time, he enjoys spending time with his young family, running, and water sports.
Gene Kim
GeneKim, CISA was CTO/founder of Tripwire, Inc. for thirteen years until July 2010. Since 1999, he has been studying high performing IT operations and security organizations. In 2006, he led the development of SOX-404 IT scoping guidance from the Institute of Internal Auditors. In 2004, he co-wrote the Visible Ops Handbook, codifying how to successfully transform IT organizations from “good to great.” In 2008,Genehelped create the PCI Scoping SIG, where he is helping the development and publication of the PCI Scoping Toolkit, scheduled for release in January 2011.
In 2007, ComputerWorld addedGeneto the “40 Innovative IT People Under The Age Of 40” list, and was given the Outstanding Alumnus Award by the Department of Computer Sciences at Purdue University for achievement and leadership in the profession.
Stacy Bresler
Stacy Bresler is currently the co-principal investigator for the National Electric Sector Cybersecurity Organization and the Vice-President of Outreach and Operations at EnergySec. Mr. Bresler has been previously employed at PacifiCorp, U.S. Bancorp, Hewlett-Packard, Conoco Oil and Chevron. He's most recent former employer was the Western Electricity Coordinating Council (WECC) where he was part of the team of NERC CIP auditors that helped establish the regional reliability audit program. He has devoted the past 12 years to the electric security cyber security profession. He is an active member of the Society of Information Management, a Certified Information Security Manager (CISM), a Certified Information Systems Security Professional (CISSP) and a Certified Information Systems Auditor (CISA).
Steve Parker
Steven Parker, CISA, CISSP, is the EnergySec Vice President of Technology Research and Projects.with the Energy Sector Security Consortium (EnergySec). ;He was part of the grassroots effort that led to the formation of EnergySec, and has served on its board of directors since 2008.
Steven’s experience includes more than a decade of full-time security work at critical infrastructure organizations including the Western Electricity Coordinating Council, PacifiCorp, and US Bank. He has contributed to a broad range of security projects covering areas such as e-commerce, identity management, intrusion detection, forensics, and security event monitoring.