Dune Security
Derek Cheng is an experienced professional in the field of cybersecurity with a strong background in providing strategic and tactical advice to companies to align security best practices with business strategies and risk appetite. With a career spanning various roles in notable companies such as Deliveroo, Square Enix, and Electronic Arts, Derek has demonstrated their expertise in developing and driving security strategies, managing security teams, and overseeing security governance committees. With a degree in Computer Science from California Polytechnic State University-San Luis Obispo, Derek continues to contribute to the cybersecurity field through their advisory roles in companies like AND Digital and WestCap.
This person is not in any offices
Dune Security
AI fighting AI. CISOs face an impossible risk landscape today. 80% of cybersecurity breaches start because of employee error. The problem is exacerbating with generative AI, as a single hacker can specifically target thousands of employees in the same amount of time that they used to specifically target tens of employees with social engineering. CISOs lack tools to deal with employee risk and are held accountable when a breach inevitably happens. By leveraging AI at each step, Dune Security empowers organizations to quantify individual risk through analyzing user behavior, context, learning patterns, and third party data. This allows the automation of tailored cybersecurity measures to each individual, transforming vulnerabilities into strengths. Dune is the central engine of all employee risk data, which is a solution that is not just timely for organizations but necessary in navigating the present cybersecurity landscape. This gives the CISO the capability to understand who are the high risk employees, to what extent, and why - as well as automatically remediate and restrict access to keep their organization safe. Today, Dune Security uniquely replaces legacy and ineffective security awareness training by pinpointing the crucial 8% of employees responsible for 80% of the risk, ensuring all employees receive personalized, machine learning-driven training tailored to their risk profile. CISOs also have easy access to quantifiable data via robust reporting and API-out capability, enabling them to both report to compliance auditors, regulators, and insurance underwriters, as well as restrict access to high-risk employees through other security systems. We are proud to be funded by Alumni Ventures, Antler, and Firestreak Ventures, among many cybersecurity industry leaders.