David Elfering

Information Security Strategy | CISO | Identity Management | Security Governance | Enterprise Risk Management
Marsh

A nationally recognized expert, David is a Senior Vice President in Marsh’s Emerging Risks Group. Prior to Marsh, David served at ReSource Pro, a global insurance services firm, as their global security executive after a 23-year career with Werner Enterprises.

In his role, David actively advises numerous enterprise CISOs, security teams, technology leaders, business executives, and Boards, with particular emphasis on cyber strategy and risk issues. The Emerging Risks Group sits at the intersection of strategy and risk deploying advanced quantitative methods to understand, measure, and manage complex risks.

In his previous position at ReSource Pro, David established a global security program across the U.S., India, and China and worked with insurance industry clients. David ensured secure delivery of services for over 6,000 offshore employees via an ISO 27001 and SSAE18 certified security program. Key initiatives included establishing global security culture, expanded internal SOC services and rapid increases in program maturity required by Fortune 500 clients.

David served as the enterprise security leader for Werner Enterprises, a nation-wide transportation services and global logistics provider. He established core security processes and underlaying technology/security systems to support complex, business aligned growth strategies. Some of his key initiatives included quantitative risk management, enterprise Identity & Access Management (IAM), vulnerability risk management, third party risk management, and board-level reporting. During this time he was also a part-time member of the SANS Institute, implementing and delivering courses.

Prior to his IT and security career, he served as an operational team member and Flight Operations Director at Goddard Space Flight Center. David also served in the U.S. Air Force as part of the Defense Meteorological Satellite Program (DMSP).

David holds a Bachelor of Science degree from the University of Maryland University College, is a Certified in Risk and Information Systems Control (CRISC) and Open FAIR.