David W. White is a founder and Chief Knowledge Officer at Axio Global. Axio is a cyber risk-engineering firm that helps organi- zations implement more comprehensive cyber risk management based on an approach that harmonizes cybersecurity technology/ controls and cyber risk transfer. Mr. White works directly with Axio clients and is responsible for the frameworks and methods that guide Axio’s services, including cyberse- curity program evaluation and benchmark- ing, cyber loss scenario development and analysis, insurance program analysis, and data analytics.
Previously, Mr. White worked in the CERT Program at Carnegie Mellon’s Software Engineering Institute, a cyberse- curity research program primarily funded by the U.S. Department of Defense and the U.S. Department of Homeland Security. While there, he was responsible for techni- cal leadership and research strategy for a portfolio of cybersecurity and resilience maturity models and frameworks and associated research, diagnostic methods, and training.
Mr. White served as chief architect for the Electricity Subsector Cybersecurity Capability Maturity Model (ES-C2M2) and served on the review team for the oil-and-natural-gas ver- sion (ONG-C2M2) and industry-agnostic version (C2M2). Mr. White co-authored the CERT Resilience Management Model (CERT- RMM) and served as the chief architect for the Smart Grid Maturity Model (SGMM).