Engineered for Protection: The Rise of Security Control Management
Ryan Heritage examines Engineered for Protection: The Rise of Security Control Management.
Summary
From infantry to cyber command
Ryan Heritage, advising Secura after retiring as US Cyber Command director of operations, describes a 25-year Marine infantry career before moving to Marine Forces Cyber Command. He says infantry lessons—communication up and down, acting with available resources, and thinking like an adversary—translate directly to cyber defense.
Dynamic networks and resiliency
He frames the network as a living weapon system where defenders fight for decision advantage. Resiliency spans hardware, operators, legacy fallback communications, and rapid adoption of new technology. AI widens the attack surface but may help close the defender-attacker gap; legacy tech debt remains a core risk when modernizing.
Automation and the human element
At Secura he ties a new SEM platform to automating manual processes, improving data confidence, and freeing staff for unfilled tasks. He cites Infosec World survey data on Gen Z bypassing AI policy, stresses users as a persistent vulnerability, and agrees critical infrastructure must retain fully manual operation skills.
Related talks
InfoSec World 2025·17 min
Marene Allison
Marene Allison investigates The Rise of Security Control Management: Secure by Design, Not by Chance.
RSAC Cybersecurity·50 min
Key Management
Security researchers examine technical aspects of Key Management and Protection: Evaluation of Hardware, Tokens, TEEs and MPC.
Kaspersky·3 min
Industry experts analyze emerging threats surrounding Deploying the endpoint protection from the management console.


