With 20 years of IT and cybersecurity experience in the U.S. Department of Defense as well as federal and commercial industries, Chris has held roles in security architecture, engineering and GRC, as well as security leadership, including CISO. He has deep expertise in cloud-native security, compliance innovation, vulnerability management, application security, DevSecOps and software supply chain security. Chris is currently the president and co-founder of Aquia and a cyber innovation fellow with CISA.

• Vulnerability Management 
• Software Supply Chain Security
• Cloud Security
• Compliance (e.g. FedRAMP, RMF, NIST 800-53, 800-171, CMMC etc)
  
• Risk Management, Governance and Cybersecurity Leadership
  

• Author - Software Transparency from Wiley
• Author - Effective Vulnerability Management from Wiley
• Public Speaker/Keynote (e.g. DevSecOps Days, RSA, Cloud Security Alliance)
• Host of Resilient Cyber Podcast and Substack
• Cyber Innovation Fellow w/ CISA

• Chief Information Security Officer (CISO) Certificate – Carnegie Mellon University, graduated June 2021
• Master of Science in Cybersecurity August 2018 – Dakota State University
• Master of Business Administration, Concentration – Information System Management, completed March 2015 - Strayer University
• BS, Information Technology System

Proud husband, father of five, author and fitness enthusiast. Enjoy engaging and contributing to the cybersecurity community, speaking, writing and hosting conversations with experts of diverse security backgrounds

Chris Hughes, IANS Faculty member since 2024, is a leader in the information security space. He provides guidance to clients on vulnerability management, software supply chain, cloud security, compliance and risk management.