Peter G.

United States · Best-selling cybersecurity/privacy/AI author, educator, servant leader, keynote speaker, board advisor, mentor, remnant truth seeker, apiarist. · Freelance Writer

FBI Citizens Academy

15 followers

About

Security leader, Virtual CISO, and long-time strategic security advisor to CISOs, CSOs, CIOs, boardrooms, and other security, technology, risk, and business executives. Real-world experience in SaaS, retail, telecommunications, consulting, advertising, non-profit, legalized gaming, manufacturing, healthcare, and local government. Servant leader: leading and equipping others to learn, grow, and succeed.

Published author of over sixty books and training courses on information security, privacy, and AI, with editions in four languages. Interviews and articles in magazines and newspapers. Adjunct university faculty emeritus. Conference and event speaker. Business advisor and mentor.

Certifications:

CISSP (2000-Present)

CISA (2002-Present)

DRCE (2008-2024)

CRISC (2010-Present)

CCSK (2010-Present)

CCISO (2012-2020)

PCI-ISA (2013-2014)

PCI-QSA (2014-2021)

CISM (2017-Present)

CIPM (2018-Present)

CDPSE (2020-Present)

A/CCRF Developer (2023-Present)

A/CCRP Developer (2024-present)

A/CRMP Developer (2024-present)

I serve an audience of One: everything I do professionally and personally reflects this.

I am a writer—anything you say or do may be used in a story.

Note: Information on this site is my own and does not necessarily represent my current or any previous employer’s positions, strategies, or opinions.

“Each one should use whatever gift he has received to serve others, faithfully administering God’s grace in its various forms.” 1 Peter 4:10 (NIV)

“In the same way, let your light shine before others, that they may see your good deeds and glorify your Father in heaven.” Matthew 5:16 (NIV)

Profile photo credit: betterpic.io

Specialties

  • Governance & Compliance
  • ISO 27001
  • Policy & Standards
  • Risk Management
  • Third-Party Risk

Skills

  • Risk Management
  • AI Governance
  • Third Party Risk Management
  • Privacy
  • IT Service Management
  • Security Governance
  • Identity and Access Governance
  • Identity and Access Management
  • Public Speaking
  • Book Publishing

16 skills in total

Licenses & Certifications

  • A/CRMP

    Akylade

    Issued Nov 2024

  • A/CCRP

    Akylade

    Issued May 2024

  • A/CCRF

    Akylade

    Issued May 2024

10 certifications in total

Experience

  • Freelance Writer

    • Published author of over 60 books on cybersecurity, privacy, and emerging technology

      Jun 1997 — Present

      Washington, United States

    • Creator of video training courses

      Jan 2024 — Present

      United States

  • Strategic Advisor

    (Confidential)

    Jan 2025 — Present

    United States

53 experiences in total

Education

  • FBI Citizens Academy

    Jan 2008 — Jan 2008

  • University of Nevada, Reno

    Electrical Engineering / Computer Science

    Jan 1975 — Jan 1979

Recent posts

Accountability is that organizational trait that ensures that individuals and organizations are held responsible for the outcomes of their AI systems.

https://amzn.to/3NBXeCZ

View post

[celebration:new_certification]Has successfully verified **A/CRMP** (Akylade)

View post

Is my reasoning sound?

I have long advocated responsible uses of AI, supported by sound and effective governance to ensure beneficial business and personal outcomes. But the repeated stories of AI agents going rogue troubles me. Are organizations giving AI agents excessive access and update rights, or are they breaking out of supposedly secure environments? Or are prompts too vague, leading to unexpected outcomes? Are basic safeguards lacking? Or is it a “damn the torpedoes, full steam ahead” attitude among executives who fear their organizations are being left behind?

Regardless of the cause or causes, I am still a believer in a sound governance foundation (which would require reasonable and enforced controls in areas including identity and access governance, data governance, SDLC-like controls and workflow for all deployments, prompts-as-code, and third-party risk management.

But as we all know, many organizations lack these and other basic safeguards, leading to the incidents that are unfolding.

I can't help but wonder whether such incidents will continue as more organizations deploy AI agents without sufficient guardrails, leading to even greater harm, including kinetic harm to property, systems, and us.

100% human authored

https://www.reuters.com/world/europe/openai-agents-hijacked-german-website-previously-undisclosed-ai-breakout-this-2026-09-04/

View post

In any business environment, AI prompts that are a part of a workflow must be treated like code. All personnel must use the exact same prompts for the same task every time.

View post

So you want to write a technical book… but how?

After writing more than 40 books, I made the time to write down my time-proven recipe for getting published. In a structured, narrative form, The Art of Writing Technical Books guides you step by step through the entire process of transforming your book idea into a finished, published book, and beyond.

Get your copy today and begin the journey.

https://a.co/d/2rtMTyD

View post

View Peter G.'s profile on Cyberr