Greg Touhill, director of the Software program Engineering’s Institute’s (SEI’s) Pc Emergency Response Crew (CERT) division is an atypical know-how chief. For one factor, he’s been in tech and different management positions that span the US Air Power, the US authorities, the personal sector and now SEI’s CERT. Extra importantly, he’s been a significant power within the cybersecurity realm, making the world a safer place and even saving lives.
Touhill earned a bachelor’s diploma from the Pennsylvania State College, a grasp’s diploma from the College of Southern California, a grasp’s diploma from the Air Conflict Faculty, was a senior govt fellow on the Harvard College Kennedy College of Authorities and accomplished govt training research on the College of North Carolina.
“I used to be a pupil intern at Carnegie Mellon, however I used to be going to school at Penn State and learning chemical engineering. As an Air Power ROTC scholarship recipient, I knew I used to be going to develop into an Air Power officer however quickly realized that I didn’t essentially need to be a chemical engineer within the Air Power,” says Touhill. “As a result of I handed all of the arithmetic, physics, and engineering programs, I ended up changing into a communications, electronics, and pc techniques officer within the Air Power. I spent 30 years, one month and three days on energetic obligation in the USA Air Power, finally retiring as a brigadier normal and having achieved many several types of jobs that have been obtainable to me inside and even past my profession discipline.”
Particularly, he was an operational commander on the squadron, group, and wing ranges. For instance, as a colonel, Touhill served as director of command, management, communications and computer systems (C4) for the USA Central Command Forces, then he was appointed chief info officer and director, communications and data at Air Mobility Command. Later, he served as commander, 81st Coaching Wing at Kessler Air Power Base the place he was promoted to brigadier normal and commanded over 12,500 personnel. After that, he served because the senior protection officer and US protection attaché on the US Embassy in Kuwait, earlier than concluding his navy profession because the chief info officer and director, C4 techniques on the US Transportation Command, certainly one of 10 US combatant instructions, the place he and his workforce have been awarded the NSA Rowlett Award for one of the best cybersecurity program within the authorities. Whereas within the Air Power, Touhill obtained quite a few awards and decorations together with the Bronze Star medal and the Air Power Science and Engineering Award. He’s the one three-time recipient of the USAF C4 Professionalism Award.
Greg Touhill
“I obtained to serve at main combatant instructions, work with coalition companions from many alternative international locations and represented the US as a part of a diplomatic mission to Kuwait for 2 years because the senior protection official at a time when America was withdrawing forces out of Iraq. I additionally led the negotiation of a brand new bilateral protection settlement with the Kuwaitis,” says Touhill. “Then I used to be recruited to proceed my service and was requested to function the deputy assistant secretary of cybersecurity and communications on the Division of Homeland Safety, the place I ran the operations of what’s now often known as the Cybersecurity and Infrastructure Safety Company. I used to be there at a pivotal second as a result of we have been build up the capability of that group and setting the stage for it to develop into its personal company.”
Whereas at DHS, there have been many noteworthy breaches together with the notorious US Workplace of Folks Administration (OPM) breach. These occasions led to Obama’s go to to the Nationwide Cybersecurity and Communications Integration Middle.
“I obtained to transient the president on the state of cybersecurity, what we had seen with the OPM breach and another deficiencies,” says Touhill. “I used to be on the federal CIO council because the cybersecurity advisor to that since I’d been a federal CIO earlier than and I obtained to conclude my federal profession by being the primary United States authorities chief info safety officer. From there, I pivoted to trade, however I additionally obtained to return to Carnegie Mellon as a school member at Carnegie Mellon’s Heinz Faculty, the place I have been educating since January 2017.”
Touhill has been concerned in three startups, two of which have been efficiently acquired. He additionally served on three Fortune 100 advisory boards and on the Data Techniques Audit and Management Affiliation board, finally changing into its chair for a time period through the seven years he served there.
Touhill simply celebrated his fourth yr at CERT, which he considers the top of the cybersecurity career and all the pieces he’s achieved up to now.
“Over my profession I’ve led groups which have achieved main software program builds within the nationwide safety house. I’ve additionally been the man who’s pulled cables and arrange routers, hubs and switches, and I have been a system administrator. I’ve achieved all the pieces that I may do from the keyboard up all the way in which as much as the White Home,” says Touhill. “For 40 years, the Software program Engineering Institute has been main the world in safe by design, cybersecurity, software program engineering, synthetic intelligence and engineering, pioneering finest practices, and determining make the world a safer safer and reliable place. I’ve had a hand within the making of right this moment’s trendy navy and authorities info know-how atmosphere, starting as a 22-year-old lieutenant, and hope to encourage the subsequent technology to do even higher.”
What ‘Success’ Means
Many individuals can be glad with their careers as a brigadier normal, a tech chief, the White Home’s first something, or working at CERT, not to mention working it. Touhill has spent his whole profession making the world a safer place, so it’s not stunning that he considers his best achievement saving lives.
“Within the Center East and Iraq, convoys have been being attacked with improvised explosive units. There have been additionally ‘direct fireplace’ assaults the place individuals are firing weapons at you and oblique fireplace assaults the place you could possibly be within the line of fireplace,” says Touhill. “The convoys have been utilizing SINCGARS line-of-site walkie-talkies for communications which can be only when the bottom is flat, and Iraq will not be flat. Because of this, our troops have been vulnerable to not having dependable communications whereas below assault. As my workforce brainstormed choices to treatment the scenario, certainly one of my guys discovered some know-how, in regards to the measurement of an iPhone, that would covert a radio sign, which is principally a waveform, right into a digital pulse I may placed on a devoted community to assist the convoy missions.”
For $11 million, Touhill and his workforce shortly architected, examined, and fielded the Radio over IP community (aka “Ripper Internet”) that had a 99% reliability price anyplace in Iraq. Higher nonetheless, convoys may talk over the community utilizing any radios. That answer saved a minimal of six lives. In a single case, the hospital physician stated if the affected person had arrived 5 minutes later, he would have died.
Sage Recommendation
Anybody who has ever frolicked within the navy or in a navy household is aware of that troopers are very nicely disciplined, or they wash out. Different traits embrace being bodily match, mentally match, and attaining stability in life, although that’s tough to realize in fight. Nonetheless, it’s a necessity.
“I served three and a half years down vary in fight operations. My expertise taught me you could possibly be doing 20-hour days for a yr or two on finish. When you haven’t constructed a very good basis of being disciplined and match, it impacts your skill to take care of presence in occasions of stress, and CISOs work in traumatic conditions,” says Touhill. “Staying match additionally fortifies you for the lengthy haul, so that you don’t get burned out as quick.”
One other mandatory talent is the flexibility to work nicely with others.
“Cybersecurity is an interdisciplinary follow. One of many nice joys I’ve as CERT director is the big selection of consultants in many alternative fields that embrace software program engineers, pc engineers, pc scientists, information scientists, mathematicians and physicists,” says Touhill. “I’ve people who’ve enterprise levels and others who’ve philosophy levels. It is actually a wealthy neighborhood of pursuits all coming collectively in direction of that frequent objective of constructing the world a safer, safer and extra trusted place within the cyber area. We’re are type of just like the cyber neighborhood look ahead to the entire world.”
He additionally says that cash isn’t all the pieces, having taken a pay minimize to go from being an Air Power brigadier normal to the deputy assistant secretary of the Division of Homeland Safety .
“You’ll at all times do nicely if you happen to choose the job that issues most. That’s what I did, and I’ve been rewarded each step,” says Touhill.
The most important problem he sees is the complexity of cyber techniques and software program, which may have second, third, and fourth order results.
“Complexity raises the price of the assault floor, will increase the assault floor, raises the variety of vulnerabilities and exploits human weaknesses,” says Touhill. “The No. 1 factor we have to be taking note of is privateness on the subject of AI as a result of AI can unearth and uncover information from information we have already got. Whereas it provides us higher insights at higher velocities, we have to be cautious that we take precautions to raised defend our privateness, civil rights and civil liberties.”
