Jason Hills

Mr. Hills has fifteen years of experience leading and delivering information security and consulting services. He has expertise in building scalable managed services, conducting adversarial red team engagements, and performing Building Security In Maturity Model (BSIMM) assessments. Mr. Hills has worked with several Fortune 100 clients, primarily in the financial sector. He leads Cigital’s New York City practice, where he focuses on building and improving client software security initiatives.

Podcasts / Webinars

CSIAC Webinars » The Building Security In Maturity Model (BSIMM)

The Building Security In Maturity Model (BSIMM, pronounced “bee simm”) is designed to help you understand, measure, and plan a software security initiative. The BSIMM-V was created by observing and analyzing real-world data from sixty-seven software security initiatives. It is… Read More

The DoD Cybersecurity Policy Chart

This chart captures the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.

View the Policy Chart

CSIAC Journal - Insider Threat and the Malicious Insider Threat

This issue of the CSIAC Journal presents five articles which represent different perspectives on Insider Threat and approaches to understand and remediate that threat.

Read the Journal

CSIAC Journal - Serious Games to Enhance Defense Capabilities

This 2017 special edition of the CSIAC Journal focuses on wargames and the many uses of Modeling and Simulation (M&S) that support decision making needed at the various levels of combat.

Read the Journal

CSIAC Reference Document - Recent Developments in Cyberlaw: 2018

CSIAC SME and member of the American Bar Association’s Information Security Committee, Richard “Rick” Aldrich, gives a snapshot of the recent developments in cyberlaw, policy, standards, court cases and industry legal frameworks. These slides focus on emerging issues such as cloud data storage, the scope of 3rd-party doctrine, encryption, warrants for electronic searches, and artificial intelligence.

Read the Document