Russell Eubanks
Principal InstructorManaging Partner at Cyverity
Specialities
Cybersecurity Leadership

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsCybersecurity Leadership

Russell Eubanks teaches cybersecurity leadership from the place where clarity matters most: when a team knows it has gaps but needs help deciding what to fix first. A SANS Principal Instructor, Assistant Professor at the SANS Technology Institute, and Managing Partner and Co-Founder of Cyverity, Russell teaches LDR519: Cybersecurity Governance, Risk, and Compliance (GRC) and has taught LDR514: Security Strategic Planning, Policy, and Leadership, SEC566: Implementing and Auditing CIS Controls, and LDR521: Security Culture for Leaders. He is also the author of SEC405: Business Finance Essentials. His experience as a former CIO and CISO of the Federal Reserve Bank of Atlanta helps students connect security strategy, culture, controls, and finance to decisions leaders must explain to boards, executives, and teams.
Russell’s path into cybersecurity did not begin in an executive office. He started as a factory worker, used his employer’s tuition reimbursement program to attend computer classes, and moved into security as Y2K created urgent demand for technical talent. Since then, he has built security programs, led cybersecurity teams, advised CISOs, and assessed organizations across industries. At Cyverity, his work focuses on maturity assessments that give leaders a clear view of their posture and a prioritized roadmap for improvement. He draws on that experience while teaching the labs, helping students connect Cyber42 simulations, business case development, budgets, and executive communication to the decisions they face at work.
Russell holds a Bachelor of Science in Computer Science from the University of Tennessee at Chattanooga, is a Certified Information Security Manager, a Certified Information Systems Security Professional, and holds ten GIAC certifications. Russell Eubanks is also a faculty member of the SANS Technology Institute, which has been designated an NSA Center of Academic Excellence in Cyber Defense. He has contributed to the profession as an IANS Faculty member and former SANS Internet Storm Center handler.
Russell teaches with the conviction that students are not passive recipients of material. They bring experience that can sharpen the room. His goal is for students to leave his classroom able to prioritize security work, make stronger business cases, communicate risk in a language leaders understand, and help people grow into better security professionals. The human throughline is hard to miss; he wants mentees to have the advantages he wished he had seen sooner. Away from work, Russell studies leadership, spends time with his wife, son, and daughter, smokes pork on his Big Green Egg, disconnects from screens when he can, and has run five marathons.
Great presenter, greater speaker. Russell got everyone involved and shared real life stories to enrich the course material.
Excellent job, Russell! I really enjoyed your technique, caring, thoughtfulness and good vibes you brought to this class.
Russell is an interactive and engaging speaker. Great presentation skills.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Policies shouldn’t just meet compliance, they should drive strategy. This webinar shows how to transform policy reviews into a business advantage, align governance with goals, and build agile, executive-ready cybersecurity policies.

This session shows how to turn a SANS template into a governance-ready policy in 60 minutes, with clear scope, measurable requirements, and a repeatable workflow for real-world enforcement.

Whether leading a new security team or refining an existing strategy, this session will provide a practical, repeatable framework to define and implement your team's mission and vision in an hour or less.

Join us for this insightful webinar tailored to CISOs and security leaders looking to build and enhance a strong security culture within their organizations. In today’s evolving threat landscape, fostering a robust security culture is essential to protect business assets and maintain customer trust. This session will provide three practical steps to align your cybersecurity strategy with your organization’s mission, vision, and values. When this is in place, you can create a culture that sees security as a business enabler and not just a cost center.

Great security leaders do more than manage risks—they inspire teams, reduce turnover, and build a culture of trust and accountability. But in an industry where burnout is high and retaining top talent is a constant challenge, how can security leaders create an environment where their teams feel valued, motivated, and engaged? Whether you’re an aspiring CISO or a seasoned security leader, you’ll gain practical, actionable takeaways to elevate your leadership, inspire your team, and drive long-term success.

In this webinar, Russell Eubanks addresses a common challenge CISOs face: the Curse of Knowledge. Drawing inspiration from the work of Chip and Dan Heath, as featured in their article "What is the Curse of Knowledge?" in their Harvard Business Review. Russell highlights how deep expertise can unintentionally become a barrier to clear communication and leadership. The Heath brothers explain, "Once we know something—we find it hard to imagine not knowing it. Our knowledge has ‘cursed’ us. We have difficulty sharing it with others because we can’t readily re-create their state of mind."

In this SANS webcast, Russell Eubanks, Principal Faculty at the SANS Institute and Managing Partner at Cyverity, will expose participants to the 5 Levels of Risk Assessment that can be used to identify vulnerabilities, threats, and potential impacts on their organization.

Cybersecurity remains a critical aspect of every organization's operations. In many companies, cybersecurity is their top risk. As cyberattacks become more sophisticated and frequent, organizations need to develop a culture of cybersecurity to protect their assets and reputation. In this webinar, we will explore how to build a culture of cybersecurity within your organization in 4 discrete steps.

Review relevant educational resources made with contribution from this instructor.