Sounil Yu

Abstract: The Cyber Defense Matrix enables organizations to define clear categories for the range of products and services that are available in the marketplace to solve various information security problems. It aligns closely with NIST’s Cybersecurity Framework and helps make sense of the wide range of security technologies and ensures that control gaps are being covered. In addition, it highlights opportunities for technology disruption and investment. Organizations using the Cyber Defense Matrix can also understand where they may be overly reliant on technology. Adopting this Matrix and its classifications enables all of us to remove confusion around the security technologies that we buy and ensures that organizations can align their technology vendors to ensure that they have the suite of technologies that they need to execute their information security mission.

Sounil Yu is the Chief Security Scientist at Bank of America and leads the Security Innovation Team to execute innovation initiatives and crazy experiments that reduce risk and address daunting challenges in information security. Prior to this position, he helped improve information security between several Fortune 100 companies and government agencies. Sounil specializes in establishing, managing, and protecting startups within the environment of an existing large enterprise. Every summer, he oversees dozens of interns as they develop meaningful capabilities that advance the state of cybersecurity. Sounil lives in Northern Virginia with his wife and their four homeschooled children.