Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University
Menu
Home Digital Library Charles M. Wallen | SEI Digital Library

Digital Library

Charles M. Wallen

Author

Charles M. Wallen

3435

CERT Division, Software Engineering Institute

Charles M. Wallen has been a thought leader in operations and IT risk management for over 20 years. He has provided consulting to public and private organizations, led industry-wide initiatives, and managed global operations risk management and governance programs at American Express and Bank of America.  

Charles works closely with the CERT Division of Carnegie Mellon University’s Software Engineering Institute as a Senior Member of the Technical Staff. His work at CERT focuses on resilience management, external dependency risk management, and critical infrastructure protection. He is a Principal with Spectrum Consulting Services, in Dallas, Texas, which he formed in 2004. Spectrum provides management consulting to a variety of industries, specializing in operations risk management, cybersecurity, business continuity, supplier oversight, and governance.

November 2017 - Presentation Cyber Hygiene: A Baseline Set of Practices

Topics: Cyber Risk and Resilience Management

The CERT Division's Cybersecurity Hygiene is a set of 11 practice areas for managing the most common and pervasive cybersecurity risks faced by organizations.

May 2017 - Article Assessing DoD System Acquisition Supply Chain Risk Management

Topics: Cybersecurity Engineering, Acquisition Support, Risk and Opportunity Management

In this Crosstalk article, the authors discuss the growing challenge of cyber risks in the defense supply chain.

September 2016 - White Paper Managing Third Party Risk in Financial Services Organizations: A Resilience-Based Approach

Topics: Cyber Risk and Resilience Management

A resilience-based approach can help financial services organizations to manage cybersecurity risks from outsourcing and comply with federal regulations.

May 2007 - Technical Report Introducing the CERT® Resiliency Engineering Framework: Improving the Security and Sustainability Processes

Topics: Cyber Risk and Resilience Management

In this 2007 report, the authors explore the transformation of security and business continuity into processes to support and sustain operational resiliency.

October 2006 - Presentation Resiliency Engineering Framework Project Update

Topics: Cyber Risk and Resilience Management

This presentation provides an update of the Resiliency Engineering Framework project being conducted by the Software Engineering Institute's CERT program. It was delivered by David White and Charles Wallen at the FSTC annual meeting on October 11, 2006.

September 2006 - Presentation Operational Resiliency Management: An Introduction to the Resiliency Engineering Framework

Topics: Cyber Risk and Resilience Management

In this presentation, Ron McLeod discusses a partnership with TARA to analyze the outbound and inbound traffic in networks of convenience.