Group Purchasing
Group Purchasing

James Tarala

Senior InstructorManaging Partner at Cyverity

Specialities

Cybersecurity Leadership

Connect with James

James Tarala

About James Tarala

James Tarala is a Managing Partner at Cyverity and a Senior Instructor at the SANS Institute, where he leads instruction and authorship of high-impact leadership courses such as LDR519: Cybersecurity Governance, Risk, and Compliance (GRC) and LDR419: Performing a Cybersecurity Risk Assessment (retired). In his dual role as consultant and educator, he guides organizations and students alike through the challenges of risk, governance and compliance from boardroom to SOC.

James’s career began not in computers, but in education: with a Bachelor of Science in Linguistics and early work teaching in remote global locations, he developed a passion for translating complex ideas into accessible learning. He then turned his boyhood hobby of computers into a technology teaching career, eventually moving into enterprise IT, infrastructure architecture and security consultancy. Over several decades he has designed large-scale infrastructure, engineered security architectures and delivered independent assessments for major organizations—and those real-world consulting experiences directly shaped his SANS labs and scenarios. As the author of the course LDR419, he brings his field work into the classroom, so students conduct assessments, build threat models and brief executives in real time. With LDR519, he trains leaders to build governance and risk-management programs that span the enterprise—not just technology teams.

James holds key credentials including Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Project Management Professional (PMP), and 14 GIAC certifications. He is also a faculty member of the SANS Technology Institute, which has been designated an NSA Center of Academic Excellence in Cyber Defense and is a multi-year winner of the National Cyber League competition. And his long-time community contributions include technical editorship for the CIS Controls, founding member of the Cybersecurity Risk Foundation, and volunteer work turning control frameworks into usable assessments. His tools and templates and open-source taxonomies support measurable risk management and compliance.

In the classroom, James tells students the truth: cybersecurity isn’t wizardry, it’s disciplined work. He emphasizes focus over distraction, helping practitioners “eat their vegetables” rather than chase every shiny tool. He designs labs where students simulate board-briefings, validate safeguards and link control frameworks to business outcomes. Past participants say that his sessions “tie theory to practical use” and “are fun to listen to while being deeply relevant.” Outside the classroom he lives in Florida, enjoys boating or paddle-boarding under the sun, and brings that same zest for clarity and calm risk-management into his teaching: staying anchored, focused and ready to navigate complexity.

Qualifications Summary
  • Managing Partner, Cyverity; Senior Instructor/Author, SANS Institute.
  • Certifications: Certified Information Systems Security Professional (CISSP); Certified Information Systems Auditor (CISA); Project Management Professional (PMP); plus 14 GIAC certifications.
  • Key achievements: Designed enterprise-scale security architectures and led risk-assessment engagements; authored SANS courses LDR419 (retired) and LDR519; long-time contributor/editor of the CIS Controls.
  • Publications and tools: Volunteer contributor to CIS Controls; co-founder of the Cybersecurity Risk Foundation; creator of assessment templates and taxonomies (AuditScripts.com).
  • Courses taught / authored: LDR519: Cybersecurity Governance, Risk, and Compliance (GRC) and LDR419: Cybersecurity Risk Management and Compliance (retired).
  • Community / other roles: Faculty member at SANS Technology Institute; IANS Faculty; frequent conference speaker (e.g., RSA Conference).

Press & Media