Chris Forbes is president and CEO of Forbes Asset Management, Inc., an executive advisory firm focused on technology risk, information security, and privacy. Chris has over 40 years of global experience, including 3x Chief Information Security Officer (CISO), 2x Chief Privacy Officer (CPO), Chief Information Officer (CIO), Chief Technology Officer (CTO), and US Navy veteran.

Chris began his career in 1981, programming mainframe computers and early PCs. In 1982, Chris enlisted in the US Navy and spent 6 years as an Electronics Technician and Nuclear Reactor Operator on two ballistic missile submarines and qualified Engineering Watch Supervisor. After his tour of duty, Chris returned to computer programming as a DoD Contractor working at the Pentagon. In the early 90’s, Chris started working for several large global financial services and banking companies. In 2001, Chris was the Chief Technology Officer for an international automotive company and was given his first Chief Information Security Officer (CISO) role.

Chris has advised CEOs and Boards of Directors on technology and security turnaround strategies, optimized business technology models, assisted with mergers and acquisitions (M&A), driven designs for new technology products, overhauled organizational and operational effectiveness, and delivered countless financial efficiency improvements. Prior firms include the Federal Reserve, JPMorgan Chase, BNY Mellon, BNP Paribas, AXA, Barclays, TD Ameritrade, DaimlerChrysler, Banc of California, Allianz, City National Bank, and Royal Bank of Canada.

Chris is working on several research projects, including Complete Information Security Strategy, Multiyear Transformational Roadmaps, Comprehensive Security Programs, Reference Enterprise Security Architecture, Predictable Threat Modelling, and Certifiable Security Levels.

CISO Desk Reference Guide Books

Vendor Management

From meeting regulatory requirements for assessing third-party risk, to understanding where your data resides externally, to understanding who has access to your data and your systems, vendor management has become an essential discipline for managing enterprise risk. The CISO Desk Reference Guide: Vendor Management will be the foundation of your vendor management program.