ISA — Internet Security Alliance
INTERNET SECURITY ALLIANCEBOARD RECRUITMENT

ISA Board Recruitment · Project brief · October 13, 2026

Understanding the Assignment: Project Direction from ISA/Larry Clinton

Develop a membership recruitment program around the right people, use ISA’s own materials to explain its value and turn promising prospects into meaningful conversations with Larry and ISA leadership.

The original assignment

  1. Start with the type of person ISA wants. Use the supplied current-board roster as the benchmark, with the emphasis on the person and their interests.Larry’s July 24 email and board attachment
  2. Understand and communicate ISA’s value. Use the who-we-are material, board satisfaction survey, monthly highlights and member relationships to reach people who want to engage with ISA’s agenda.July 24 and August 22 emails and supplied files
  3. Research and prioritize appropriate executives. Identify CISO-level and comparable leaders; understand their background, influence and connection to ISA; prepare the strongest candidates for ISA review.August 28 program outline circulated by Larry
  4. Develop personalized engagement and a working pipeline. Explain why each person was identified, provide relevant ISA information, follow up, coordinate leadership conversations and report each prospect’s status and next step.August 28 program outline circulated by Larry

This outline condenses the original emails and supplied materials. The operational outline was a 1631 plan circulated by Larry; his later emails refine the target profile, research depth and approach.

ISA Project Refinements from Larry & Team

Subsequent direction, in date order

Lead with individual engagement and ISA’s value

Find people who want to engage with ISA’s agenda. Emphasize policy access, influence on cybersecurity and governance, NACD, senior peers and opportunities to contribute.

Add a DC-area segment

Connect with Craig Martin about local prospects and travel/time barriers. Include this segment without limiting recruitment to DC-area people.

Discussion scheduled for end of October.

Use sector material and regular coordination

Use the summer report, Hill decks and sector-specific recordings for defense, finance, IT and energy, with healthcare for discussion. Establish regular Tuesday progress and strategy meetings.

Aim for five new sponsors; tailor each appeal

Share the research with the board. Use the Thales proposal as a model for a concise corporate case, adapting the appeal to the person and company, including US-specific policy, webinar and NACD emphasis where relevant.

Deepen the research and make exact ISA matches

Go beyond titles and biographies. Verify roles, affiliations and company scale. Identify what each person actually said, then connect it to the specific ISA policy, handbook material or webinar and develop the outreach argument together.

Revise the roster and use member introductions

Add McKnight, Simonovich and Betz. Develop pitches for Fowler, Papay, Freund and Porter. Pursue Microsoft through Igor for one suggestion. Remove the named unsuitable prospects and director-only, underfunded or competing-organization cases.

Recruit management executives comparable to ISA’s board

ISA is a management organization speaking to boards. Retarget toward comparable operating executives with a credible corporate funding route; CEO, director, retired or academic status alone does not establish fit. Use the intern research to sharpen both interests and suitability.

The dates above trace Larry’s emails. The current direction below brings these instructions together; candidate recommendations remain subject to ISA review.

Recruitment direction from Larry

Consolidated from his emails and supplied project files

“we are more a management organization speaking to boards”Larry Clinton · October 12, 2026

Business objective: five new sponsors in 2026.Larry’s September 29 email

People who want to engage

“We are looking for people (not companies—people) who want to engage with us on our agenda.” Association with current ISA board members and, in some cases, Larry is a driver of interest.

August 22 · Materials that may be helpful to promote ISA

Use ISA’s current board as the model

The supplied board roster shows the type of person to recruit. The latest direction is to target management executives comparable to current ISA board members, rather than corporate directors or CEOs simply because of their seniority.

July 24 board attachment · October 12 retargeting email

Make sure the company can support membership

Clarify each company’s business, scale and relevance to ISA. Larry specifically cautioned that small consulting entities, academics without sufficient budget and retired people may not be suitable prospects for a $75,000 membership.

October 8, 9 and 12 emails

Research what the person actually says

Go beyond titles and basic biographies. Use public statements, interviews, articles and LinkedIn posts to identify the individual’s priorities; verify current roles and affiliations and include relevant source links.

October 8 · Initial thoughts on the top 50 list

Make the exact ISA connection

Identify what the person said about a topic, then match it to the specific ISA policy, handbook material or webinar. A broad label such as “governance” or “workforce” is not enough. Build an argument for why the person would want to work with ISA.

October 8 · Initial thoughts on the top 50 list

Deliver a concise, individualized appeal

Craft a targeted appeal for each promising prospect and its corporate audience. Larry supplied the Thales proposal as an example: US prospects need different emphasis, including US policy work, webinars and NACD events.

September 29 email · Thales membership proposal
Recent changes from Larry and the ISA board
  • Add for review: Tim McKnight, Leo Simonovich and Chris Betz.October 9 · Further feedback from ISA board on the top 50 list
  • Develop pitches for board-member introductions: Summer Fowler, Mike Papay, Jack Freund and Chris Porter. Larry said members would be willing to reach out once the pitch information was better developed.October 9 · Further feedback from ISA board on the top 50 list
  • Microsoft: have the attending ISA board members talk with the intended top-CISO contact, Igor, and ask for one suggestion to pursue.October 9 · Further feedback from ISA board on the top 50 list
  • Remove unsuitable cases: Larry named Edna Conway, Sam Visner, Nuala O’Connor, David Mussington, Dan Caprio, Chris Sullivan and Robert Cantu. His reasons included retirement, insufficient budget, small companies, competing trade-association roles and corporate-director-only roles.October 9 email · spellings reconciled to the research records
  • Retarget management, not director-only profiles: corporate directors generally do not decide which associations management should fund. An outside board role can coexist with a qualifying management role, but is not the recruitment model on its own.October 9 and October 12 emails
  • Use the interns’ deeper research: Larry supplied an additional report on five candidates to help assess both specific interests and whether they were suitable ISA prospects.October 12 · ISA Prospects and intern attachment
What the recruitment appeal should emphasize

Five points Larry highlighted in his August 28 email

  • ISA’s direct access to policymakers and senior government leaders.
  • The opportunity to help shape cybersecurity policy and corporate governance.
  • ISA’s partnership with NACD and its Cyber Risk Oversight Handbook.
  • Participation in a select group of senior cybersecurity leaders.
  • Opportunities to contribute to ISA meetings, publications, programs and thought leadership.

Supplied membership proposal: the September Thales proposal describes a twelve-month term at $75,000 annually, a corporate membership with a designated board representative and company-wide participation. It presents ISA’s work in thought leadership, corporate governance and public policy. These are the supplied proposal’s terms, subject to ISA’s current confirmation.

Project workflow and materials Larry asked us to use

1631 supplies the research depth

Larry said ISA can help build the program connection and messaging, or work through the 50 together, but relies on 1631 for deeper upfront research. Share the material with the current board and develop the targeted appeals.

September 29 and October 8 emails

Review messaging before an approach

Seek current members’ relationship leads and willingness to contact prospects at the appropriate time. Larry’s reply to Tracie explicitly calls for messaging feedback before making the approach.

October 8 · Do you know any of these people? and reply

Include a DC-area segment

Connect with Craig Martin about his local prospect list. Larry supported a DC-area segment to address travel and time barriers, while explicitly saying not to target only local people.

Discussion scheduled for end of October.

August 30 · Re: Day 1: 1631 Board Slides

Use the supplied ISA materials

Use the current-board roster, who-we-are material, annual effectiveness survey, monthly highlights, summer report, Hill briefing decks and recordings. Larry identified sector-specific videos for defense, financial services, IT and energy, with healthcare for discussion.

July 24 · August 22 · September 10 emails and attachments

Keep the recruitment pipeline moving

The program outline Larry circulated calls for personalized email and LinkedIn outreach, coordinated display and sponsored content, optional video, follow-up, introductory conversations and regular reporting on engagement and prospect status.

August 28 · 1631 program outline circulated by Larry

Maintain regular coordination

Use a weekly reference point to assess progress and develop strategy. Larry subsequently requested a regular Tuesday meeting and participation by the ISA team.

September 10 email and follow-up

Historical Hill-briefing instruction: the September 2 briefing targeted Members of Congress first, their staff second and relevant federal departments third. Larry distinguished that event audience from the executive recruitment audience; the recordings and messaging were then intended for the wider membership-development effort.

August 21 and August 23 emails
Larry’s Supplied Materials — 17 linked documents

Original attachments from the reviewed project emails, with readable PDF copies of Word and PowerPoint files. Supplied dates identify the version Larry sent. These materials inform the assignment and membership discussion; candidate facts still require individual verification.

Supplied ISA board roster — July 2026

Sent July 24; dated roster, not a live membership register.

Board satisfaction survey — slides 12–24

LC Board PP.4126; sent July 24. PDF opens at slide 12.

2025 annual effectiveness evaluation

2025 Annual Evaluation.31926; sent August 22.

About the Internet Security Alliance

Who-we-are document supplied July 24.

2025 highlights and goals

2025 highlight:goals; sent July 24.

ISA highlights — 2025 final

ISA HIGHLIGHTS 2025.FINAL 12026; sent August 22.

Thales membership proposal

September 2026 proposal; sent September 29.

Larry Clinton biography

LC Bio.825; supplied August 22.

Larry Clinton CV

CV for Larry Clinton.81626; supplied August 22.

ISA intern prospect research

Intern attachment forwarded October 12; historical and reported affiliations retain their limits.

September 2026 highlights

Supplied October 1, 2026 as messaging for prospective members. Original reporting retained.

House committee briefing target list

Supplied August 23, 2026. Congressional briefing targets; this is not a board recruitment list.

Cross-sector AI study announcement

Supplied August 21, 2026 with the briefing/member-development email. Larry’s research purpose and policy framework.

AI study: convergent needs across sectors

Supplied August 21, 2026. Larry’s blog on shared AI security and governance challenges.

AI study: critical infrastructure policy gaps

Supplied August 21, 2026. Larry’s blog on standards, assurance, information sharing and economic support.

November handbook webinar backgrounder

Supplied October 9, 2026; November webinar planning material. Tool K: measuring cyber risk in business terms.

Historical combined Top 50 research — superseded

Research dated September 29, 2026; circulated by Larry October 8. Historical version, superseded by the current 50 Board Recruits report. Do not use its roles, relationship claims or ranking as current verification.

Coverage note: These 17 files are the recovered, readable document attachments from the 21 project source emails reviewed. A separately attached “About ISA.925.docx” could not be retrieved; the July “About the Internet Security Alliance” document is available above. This is not a claim that every attachment in Larry’s mailbox is included.

ISA Resources for Candidate Review

A focused reading list to support ISA’s internal candidate discussions. Resource-to-candidate matches are research suggestions for ISA to evaluate, not findings of interest, eligibility or endorsement. Official links checked October 13, 2026.

Start here: 2026 handbook · Tool K metrics · Five-sector AI research

2026 · fifth edition

2026 NACD–ISA Director’s Handbook on Cyber-Risk Oversight

Use the oversight principles and toolkit to ask what practical board guidance the candidate can help ISA develop.

Useful candidate discussions: Summer Craze Fowler, Christopher Porter and Richard Seiersen: metrics and board reporting. Chris Betz: AI governance. Pat Opet and Stephen Scharf: supplier risk.

Start with Tool K (printed pp. 66–68), Tool L (69–71), Tool J (63–65), Tool E (48–50) and Tool H (57–59). PDF viewer page numbers differ from printed pages.

Official NACD PDF · free public download

Open official resource

2026 handbook toolkit

Tool K: Board-Level Cybersecurity Metrics

Test whether a candidate can connect technical evidence to financial exposure, operational decisions and measurable improvement.

Useful candidate discussions: Summer Craze Fowler, Christopher Porter and Richard Seiersen.

Pair this with Larry’s November webinar backgrounder. Ask for a concrete example of a useful board metric and the decision it changes.

Official NACD web resource

Open official resource

2026 · portal labels briefing September 2, 2026

ISA’s Proposed AI Policy: research and congressional briefing

Review ISA’s five-sector work, then ask what new operational evidence or policy proposal the candidate can contribute.

Useful candidate discussions: Chris Betz: AI/cloud governance. Leo Simonovich: energy and industrial systems. Christopher Porter: threat and policy analysis. Microsoft referral: shared technology dependencies.

The sector documents below provide a more focused starting point. A research match is not evidence that a candidate attended, endorsed or contributed to ISA’s study.

ISA research portal and public recording

Open official resource

Publication date not shown · reviewed October 13, 2026

ISA statement supporting the Cyber PIVOTT Act

Assess whether a candidate can contribute to workforce development, training partnerships and public-sector capacity.

Useful candidate discussions: Mark Papay, Max Everett and Helen Patton: potential workforce and education discussions.

This is ISA’s advocacy position. Confirm legislative status separately before using it in outreach.

ISA policy statement

Open official resource

Publication date not shown · reviewed October 13, 2026

Why harmonizing cyber regulation won’t work — and what will

Ask how a candidate would demonstrate effectiveness, eliminate duplicative requirements or evaluate regulatory cost and benefit.

Useful candidate discussions: Kemba Walden, Max Everett and Christopher Porter: potential policy contributions; Richard Seiersen: measurement and economics.

Use as a discussion prompt about ISA’s policy approach, rather than proof of a candidate’s agreement.

ISA policy essay

Open official resource

Pan-European second edition: 2024 · other editions have separate dates

International Cyber-Risk Handbooks

Assess the value of international experience and the ability to adapt director guidance across jurisdictions.

Useful candidate discussions: Leo Simonovich and candidates with multinational operating or regulatory experience.

Select the relevant country edition. Some downloads use SharePoint or an access form; this link opens the official directory.

ISA publication and download directory

Open official resource

2023 publication · ISA overview reviewed October 13, 2026

Fixing American Cybersecurity: Creating a Strategic Public-Private Partnership

Understand ISA’s social-contract approach and sector policy work before asking a candidate to contribute a chapter, briefing or policy initiative.

Useful candidate discussions: Policy-oriented candidates across defense, energy, finance, healthcare, retail, telecommunications and IT.

The linked page describes the book and provides purchase information; the complete book is not hosted here.

Book overview and purchase link · not a free PDF

Open official resource

March 8, 2011 · historical policy foundation

Improving our Nation’s Cybersecurity through the Public-Private Partnership

Trace the roots of ISA’s work on incentives, risk management, information sharing and supply-chain cooperation.

Useful candidate discussions: Candidates offering public-private partnership, policy or supply-chain expertise.

Historical context only. The 2024 upload path is not the document date and does not make the recommendations current law.

ISA-hosted white paper PDF

Open official resource
Five sector briefings and analyses — 10 original research files

Published on ISA’s AI policy portal. September/October are the website upload paths, not an assertion of the original research dates. Original files open as PowerPoint or Word downloads; author affiliations are the portal’s attribution.

Defense industrial base

2026 ISA research · JR Williamson / Leidos

Defense and government-facing candidates: evaluate national-security dependencies and small-supplier needs.

Energy

2026 ISA research · Michael Woods / GE Vernova

Leo Simonovich: test contributions on industrial operations, continuity and AI security economics.

Financial services

2026 ISA research · Jon Brickey / Mastercard (retired, as labeled on ISA’s portal)

Pat Opet, Karl Schimmeck and Stephen Scharf: potential discussions on governance, fraud, resilience and shared dependencies.

Healthcare

2026 ISA research · Craig Martin / UnitedHealth Group (portal attribution)

Healthcare candidates and the scheduled Craig Martin discussion: identify operational and patient-safety expertise gaps.

Information technology

2026 ISA research · Kris Lovejoy / Kyndryl (portal attribution)

Chris Betz and the Microsoft referral: evaluate cloud, AI governance and cross-sector technology dependencies.

For Larry’s supplied AI announcement, convergence and gaps essays and November webinar backgrounder, open Larry’s Supplied Materials above.

Source emails and files
  • July 24 — Follow up form our call this week; board roster, annual board satisfaction survey slides 12–24 and who-we-are one-pager.
  • August 21–23 — briefing promotion and ISA materials; board list, monthly highlights, effectiveness survey, Larry’s biography and extended vita.
  • August 28 — A new approach to ISA membership Development; recruitment priorities and the circulated 1631 program outline.
  • August 30 — Re: Day 1: 1631 Board Slides; Craig Martin and DC-area segmentation.
  • September 10 — Follow up from the board meeting and reply; sector material, summer report, Hill decks and Tuesday coordination.
  • September 29 — Re: Board Member Prospect lists; five-sponsor objective, individualized appeals and the Thales membership proposal.
  • October 8 — Initial thoughts on the top 50 list; source depth, employer checks and exact ISA matches. Do you know any of these people? and replies; member introductions and messaging review.
  • October 9 — Further feedback from ISA board on the top 50 list; additions, removals and the Microsoft referral route.
  • October 12 — ISA Prospects and attached intern research; management-focused retargeting and corporate funding.

Source-based consolidation: quoted passages preserve Larry’s wording; other passages condense his emails and supplied files. The August 28 operational outline was a 1631 plan circulated by Larry. This section records his direction, not a new approval. Current candidate decisions and research progress appear separately below.

50 Board Recruits

50 Board Recruits · 187 pages

All 50 designed briefs, with sourced headshots and company logos, current-role evidence, contact routes, policy history and proposed ISA contributions.

Research status: 20 of 50 meet the ten-sighting target. The remaining 30 need deeper substantive evidence. Direct membership, eligibility, sponsorship, interest and time qualification remains open for all 50.

Browse the 50 Board Recruits

Select a name to open its research page. Each page includes its brief and one button to submit ISA feedback to 1631 for report updates.

01Summer Craze FowlerExponent · p. 402Leo SimonovichSiemens Energy · p. 903Christopher PorterBooz Allen Hamilton · p. 1504Chris BetzGoogle Cloud / Alphabet · p. 1905Noopur DavisComcast · p. 2306Pat OpetJPMorganChase · p. 2907Karl SchimmeckSynchrony Financial · p. 3308Stephen ScharfBlackRock · p. 3709Max EverettShaw Industries · p. 4110Richard SeiersenQualys · p. 4511Steve PughIntercontinental Exchange · p. 5012Jodie KauttTarget · p. 5313Stephen SparkesTD Bank · p. 5714Gregory BarnesRegeneron · p. 6015Ariel WeintraubAon · p. 6316Debbie JaneczekING · p. 6717Brian HeemsothFannie Mae · p. 7018Olivier NautetAXA · p. 7419James NettesheimBlock · p. 7720C. J. MosesAmazon · p. 8121Taylor LehmannSalesforce · p. 8522Michael (Mike) NewbornNavy Federal Credit Union · p. 8923Jerry GeislerWalmart · p. 9424TJ BeanHCA Healthcare · p. 9825Matt RoweLloyds Banking Group · p. 10126Tim HeldGlobal Payments · p. 10527Brennan BaybeckOracle · p. 10828Michael SouthDICK'S Sporting Goods · p. 11229Jason SteadChoice Hotels International · p. 11530Chris McFarlandAbercrombie & Fitch · p. 11831Paul SuarezCasey's · p. 12132Marnie WilkingBooking.com · p. 12433Colleen McMahonViatris · p. 12834Michael BrewerNeurocrine Biosciences · p. 13135David RitenourWells Fargo · p. 13436Anthony SoulesAmgen · p. 13737Debby BriggsNETSCOUT · p. 14038Ngozi EzeLevi Strauss & Co. · p. 14439Lena TaylorCrocs · p. 14740Kevin CrossDell Technologies · p. 15041Eli EdelkindCAVA · p. 15342David SotoTrellix · p. 15643Jim RouthSaviynt · p. 15944Steve BonillaWynn Resorts North America · p. 16345Brett CummingSkechers · p. 16646Nancy BrainerdMedtronic · p. 16947Tarik RahmanovicAbbVie · p. 17248Scott T. NicholsDanaher · p. 17549Patricia TitusAbnormal AI · p. 17850Helen PattonCisco · p. 183

ISA Team Recommended Target Prospects

Seven recommended names, plus the Microsoft referral route below. ISA decides each next step.

Microsoft referral route

One corporate account · nominee to be confirmed

ISA Decisions/Potential Next Steps

Considerations for ISA internal discussion

Four candidates for ISA internal discussion. Two on hold, one existing relationship to reconcile and one Microsoft referral route.

PersonConsiderationNext step

Before outreach: confirm ISA membership and eligibility, introduction ownership, current role, executive interest, company sponsorship, time and an agreed contribution. A relationship lead is not a confirmed introduction assignment.

The focused ISA-recommended review

32 pages with the decision sheet, headshots, logos, contact routes and source-linked research.