Ambassador

Kevin Tambascio

Director of Cybersecurity Data and App Protection at Cleveland Clinic

United StatesVerified Community Ambassador

Identified Expertise

Content Kevin is Following

Are you using OKRs (Objectives and Key Results)?

People & Leadership Process Management

Not using OKRs

Using OKRs within some business units

Using OKRs enterprise wide

View Results

6.1k views2 Comments

What is the most difficult part of your current or prior role(s)?

People

Culture

Technology

Budget

Finding great talent

Education

Strategy

Building

View Results

4.4k views

I'm looking for a tool to manage application security requirements for our organization. The requirements need to include both regulatory requirements (healthcare) and threat-based requirements through a lightweight threat modeling component. So far, SD Elements looks like a lone winner in this market segment. Does anyone have experience with them or one of their competitors? SD Elements is intriguing as it would also help us track compliance to the requirements thereby helping to measure progress and outcomes.

Applications & Platforms Security Frameworks (NIST, CIS, CSF)

Kevin TambascioDirector of Cybersecurity Data and App Protection at Cleveland Clinic in Healthcare and Biotech2 years ago

There multiple tools are available in the market. I would suggest you please create a business use case sheet in should consist of your security requirements and regulatory requirements considering the technology stacks. ...read more

431 views1 Comment

How do you avoid hiring a team of "yes men" (or women)?

People & Leadership

Kevin TambascioDirector of Cybersecurity Data and App Protection at Cleveland Clinic in Healthcare and Biotech10 months ago

A couple of suggestions: 1) You ask coaching questions to assess whether the candidate has critical thinking; 2) Respectfully, you put the candidate under moderate pressure and observe how they react. This might involve saying ...read more

What advice would you give a brand new security leader about supporting the development needs of the team they’ve inherited? What first actions should they take to position them as a supportive and trusted leader?

Kevin TambascioDirector of Cybersecurity Data and App Protection at Cleveland Clinic in Healthcare and Biotech9 months ago

First and foremost, prioritize training and education for your team. In cybersecurity, continuous learning is essential. You can't afford to be complacent. Make training a part of your team's annual goals. Ensure every director ...read more