Michael Walters

As Chief Information Security Officer (CISO) at Washington State University, I lead a system-wide cybersecurity program grounded in risk alignment, operational resilience, and institutional trust. With over 30 years of experience across national defense and higher education, I bring a deep understanding of how to lead complex organizations through change—strategically, collaboratively, and measurably. I’ve designed and executed a multi-year security transformation that includes: •Establishing a centralized SOC and modernizing security operations across distributed IT environments •Operationalizing cybersecurity strategy through a controls-based governance model structured around NIST CSF and NIST 800-53, driving consistent implementation and measurable risk reduction across the enterprise •Rewriting the university’s security policy library to support a consistent, risk-informed foundation for governance and compliance *Modernizing core security infrastructure, including enterprise firewall upgrades and the transition from legacy SIEM to an AI-driven, integrated security operations platform *Implementing phishing-resistant authentication, modern endpoint and identity protection, and a unified vulnerability and exposure management lifecycle *Operationalizing risk quantification using the FAIR-CAM framework, shifting institutional risk discussions away from traditional, qualitative heat maps toward data-driven, scenario-based analysis that directly informs security investment decisions My approach is shaped by more than two decades in the U.S. Navy, where I honed the ability to lead through ambiguity, pressure, and constant change. I bring that same mindset to incident response, crisis management, and dynamic risk decision-making—balancing action with clarity and accountability. I also apply principles of organizational design, Open Systems Theory, and high-performance team development to align structure, leadership, and culture around shared cybersecurity objectives. Whether navigating crisis scenarios or enabling long-term program evolution, I focus on building teams and systems that are resilient, responsive, and ready for what comes next.