Ed is a Partner leading Withum’s Cybersecurity Consulting Services practice. He has over 30 years of cybersecurity experience across the healthcare and manufacturing industries, with 20 years specifically focused on cyber and information security for financial services.
Ed’s knowledge spans maintaining domestic and international cybersecurity program development and operations. As a Certified Information System Security Professional (CISSP), Ed helps clients strengthen business operations involving Cybersecurity, Data Privacy and Regulatory Compliance, Physical Security, 3rd Party Risk Management, Operational Risk, and Enterprise Risk Management.
Prior to joining Withum, Ed was a Managing Director in the Integrated Cyber Practice at a Big 4 Accounting Firm. He also led a cybersecurity and operational risk practice at a management consulting firm. A forerunner in his industry, Ed was a founding member of the IBM Information Governance Council.
Learn more about my professional experience and how I spend my time outside the firm.
Education:
Professional Affiliations:
Ed is respected thought leader in the industry and has co-authored and published points of view and articles on cybersecurity, privacy, GDPR, effective governance, and board reporting.
Ed and his family are active in their church and support multiple local charities. They coordinated a backpack for the homeless drive during the holidays for over 5 years that brought needed clothing packed into a new backpack for homeless men and women in Cleveland. Each year approximately 150 men and women received new items at the holidays.
Ed has been married to his wife Lisa for 28 years, and they have three children. When not working Ed enjoys watching sporting events (football and baseball are his favorites), playing golf, and traveling.
Reporting window: September 28 – October 12, 2026 (trailing 14 days) This period had one defining pattern. Attackers came in through access someone else had already approved: a vendor’s login to a national register, an employee’s cloud credentials, a customer portal, and the consoles that manage whole networks. One ransomware attack on a cloud provider…
Reporting window: September 14 – September 28, 2026 (trailing 14 days) What Actually Matters This Cycle Executive Snapshot This cycle in one line: Attackers are going straight at the systems that hold people data, from HR and recruiting platforms to court records and a Pentagon personnel server, and many of the worst exposures trace back…
Cyber threats have changed significantly in just a few years. Attackers are increasingly using legitimate credentials rather than trying to break through traditional security controls. Cloud platforms, third-party relationships and expanding digital ecosystems have created more ways to access an organization’s systems and data. Artificial intelligence is making social engineering faster and more convincing. At…