Mark Williams
Certified InstructorConsultant at Cyverity
Specialities
Cybersecurity Leadership

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCybersecurity Leadership

Mark Williams is a consultant at Cyverity. He teaches LDR514: Security Strategic Planning, Policy, and Leadership, bringing more than 30 years of international experience in security, privacy, compliance, management, and enterprise security architecture into the classroom. His work across public and private sectors helps students connect strategy, policy, leadership, and governance to the real decisions security leaders must make inside complex organizations.
Mark’s career began in information systems auditing and systems administration, where he saw how often security teams were asked to build roadmaps, write standards, and influence enterprise decisions without enough practical preparation. He previously served as Enterprise Information Security Architect at BlueCross BlueShield of Tennessee and has worked across government, healthcare, manufacturing, retail, management consulting, and other regulated environments. He draws on that experience while teaching LDR514, helping students connect strategic planning, policy development, stakeholder management, executive communication, business case analysis, and Cyber42 leadership simulations to work they may already be expected to perform on the job.
Mark holds three GIAC certifications, along with SABSA Chartered Architect Foundation, Certified Information Systems Security Professional, Certified Information Systems Auditor, Certified in Risk and Information Systems Control, and Certified Information Privacy Professional/Information Technology credentials. Mark Williams is also a faculty member of the SANS Technology Institute, which is an institution that is designated as an NSA Center of Academic Excellence in Cyber Defense and is a multi-year winner of the National Cyber League competition. In addition, Mark contributed to the SANS 2023 Survey: Visibility and Attack Surface whitepaper and has worked with the Privacy by Design Incubator project.
Mark teaches with a Socratic style, using discussion, case studies, and student experience to help leaders reason through problems that do not always have a clean right-or-wrong answer. Students leave Mark’s classroom with the skills to build security strategy, write better policy, brief executives, align security work with business goals, and lead teams with more confidence. His SANS student reviews describe him as interactive, inclusive, and strong at keeping discussion moving. Away from work, Mark enjoys music, plays guitar, and has a long-running love of motorcycles.
Mark was a great speaker. Kept everything moving and let the class set the pace of discussions.
Mark did a great job engaging the students. This is a tough class, but he pulls participation out of everyone.
Mark is very interactive, diverse with his references, and inclusive of many disparate applications.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Leadership decides whether a cyber programme succeeds or stalls. Your position on the org chart has nothing to do with whether you are the leader.

In this presentation we investigate how the term Enterprise Security Architecture and Enterprise Security Architect came about. We will be discussing the attributes of the field of Enterprise Security Architecture. What it is. Where it originated, and how it is being applied today.

This talk looks at the need for better incorporation of Security in the design of systems, programs and networks. We explore the concept of SbD and review the 8 pillars, as well as how SbD benefits the business and not just Security.

Secure by design is the concept of including Security in everything we do, right at the beginning.

Review relevant educational resources made with contribution from this instructor.