Dr. Thomas Graham, Ph.D., serves as the VP and Chief Information Security Officer (CISO) at Redspin, a top cybersecurity, and privacy consulting firm, the first authorized C3PAO, and one of the first organizations to conduct a DIBCAC High CMMC (Cybersecurity Manual Model Certificate) assessment under the joint surveillance program. Dr. Graham is the architect of Redspin becoming the first authorized C3PAO and has been the lead for numerous assessments under the Joint Surveillance Voluntary Assessment Program (JSVAP). Dr. Graham is responsible for all internal security items for Redspin and its affiliates. Before Redspin, Dr. Graham supported the Defense Health Agency (DHA), where his team received a FedHealthIT award for Innovation, presented to them at the National Press Club in Washington, DC. Dr. Graham holds a Ph.D. in Information Assurance and Security, an MBA, and a Master of Science degree in Technology Systems. He also serves as the Chair for the MIS Advisory Board for East Carolina University, a member of IANS Faculty, and has been a member of the HIMSS Cybersecurity, Privacy, and Security Committee. Dr. Graham has previously spoken at other industry events including the National Cyber Summit and ISC2 Security Congress.