KF

Kiston Finney

Chief Risk Officer (cro) at Atredis Partners

Kiston Finney is a seasoned professional in risk management and information security with extensive experience in various leadership roles. Currently serving as Chief Risk Officer at Atredis Partners since May 2016, responsibilities include identifying new business opportunities, managing client relationships, and overseeing the risk practice team. Prior roles include Manager of GRC and HIPAA Security Specialist at the University of Utah Hospitals and Clinics, and Managing Principal Consultant at FishNet Security, focusing on HIPAA and risk management methodologies. Kiston's earlier experience includes positions at the University of Utah and Zions, where significant contributions were made to information security policy development and risk assessment programs. Educational background includes ongoing studies toward a Bachelor's degree in IT Security from Western Governors University, complemented by prior educational experiences at The University of Memphis and Berry College.

Location

Atlanta, United States

Links

Previous companies


Org chart


Teams

This person is not in any teams


Offices


Atredis Partners

With offices all around the United States and Canada, Atredis Partners was created by a number of security industry veterans who wanted to prioritize offering quality and client needs over the pressure to grow rapidly at the expense of delivery and execution. We wanted to build something better, for the long haul. Atredis Partners team members have written five books on information security topics, and have presented our research over fifty times at the BlackHat Briefings conference in Europe, Japan, and the United States, as well as other notable security conferences, delivering groundbreaking research and training on web, network, software, mobile and embedded exploitation. We deliver the same class of confidential security research and penetration testing for our clients, focusing on everything from low level embedded assessments to complex mobile platforms and complex application stacks. In 2015, we expanded our offerings to also include an advanced Risk and Advisory practice. Our risk practice works alongside our researchers and penetration testers, helping CISOs and CIOs turn complex technical threats and vulnerabilities into actionable plans to transform our clients’ security, both technically and culturally.