Brian Kelly

Brian Kelly

Brian Kelly is AVP of Virtual CISO with Compass IT Compliance. He has been an active member of the higher education information security community since 2007. Brian most recently served as the Cybersecurity Program Director at EDUCAUSE, and was previously the Chief Information Security Officer at Quinnipiac University. Brian holds a bachelor’s degree from the University of Connecticut and a master’s degree from Norwich University. He is a member of various professional organizations including the Information System Security Association (ISSA), InfraGard, High Tech Crime Investigation Association (HTCIA), and the Information Systems Audit (ISACA). Brian is a retired Air Force Cyber Operations Officer, where his career in information security began in 1993. Alongside his duties at Compass IT Compliance, Brian is also currently an adjunct instructor at Naugatuck Valley Community College in the CIS Department teaching Cybersecurity courses.

Posts by Brian Kelly

Their Risk is Our Risk (Case Study Draft)

by Brian Kelly on September 25, 2024 at 3:20 PM

University

This case study, created by Compass IT Compliance and commissioned by the Scholarly Networks Security Initiative (SNSI), aims to pinpoint threats to higher education institutions and propose measures to safeguard the integrity of scientific records, scholarly systems, and user persona …

Read Story

Topics: Higher Education

Cyber Incidents - Not if, but When (And When Just Happened)

by Brian Kelly on August 29, 2024 at 11:00 AM

Hourglass in an office

For those of us in information security or cybersecurity, we have long said that it is not a matter of if but a matter of when you will be impacted by a breach or an incident. Over the last several weeks, we have seen when happening more frequently.

Read Story

Topics: Vendor Management Business Continuity Planning Virtual CISO

Building a Privacy Culture This Data Privacy Week

by Brian Kelly on January 26, 2023 at 1:00 PM

Data Privacy

In 2022, data privacy became a hot topic as consumers became more aware of how their data was being tracked and used by companies. This was partly due to the efforts of companies like Apple to educate consumers about their privacy rights.

Read Story

Topics: Compliance Security Awareness Training Risk Assessment Privacy

Only YOU Can Prevent Cyberattacks This October (And Beyond)

by Brian Kelly on October 13, 2022 at 4:30 PM

Smokey the Bear stands next to a sign that reads "Fire Danger: Moderate"

Some of you may be old enough to remember Smokey the Bear. Created in 1944, the Smokey Bear Wildfire Prevention campaign is the longest-running public service advertising campaign in U.S. history. In 1947, Smokey’s slogan became "Remember... Only YOU Can Prevent Forest Fires".

Read Story

Topics: Information Security Security Awareness Training Cybersecurity Phishing Organizational Culture

Using the HECVAT to Measure Vendor Risk

by Brian Kelly on September 8, 2022 at 1:00 PM

Students gather in a lecture hall

Not a day goes by without a conversation about third-party risk management. Our clients are being bombarded in all directions; asked by regulators, auditors, their clients, and customers alike to complete third-party risk assessments (SIG, CAIQ, HECVAT).

Read Story

Topics: Vendor Management Compliance Risk Assessment Higher Education

Your Guide To Cyber Liability Insurance

by Brian Kelly on August 31, 2022 at 1:00 PM

A maroon sedan is wrecked in an accident

Unsafe at Any Speed: The Designed-In Dangers of the American Automobile is a non-fiction book by consumer advocate Ralph Nader, first published in 1965. Its central theme is that car manufacturers resisted the introduction of safety features (such as seat belts) and that they were gen …

Read Story

Topics: Cybersecurity Insurance Policies and Procedures Risk Management

See all

See all

Subscribe by email