The Attack Surface You Acquired: Cyber Risk Across Multi-Entity Organizations | Resilience Risk Briefing
Every acquisition adds to your attack surface. Hear how multi-entity organizations manage risk, insurance, and governance as they grow.
Where cyber risk hides in a multi-entity organization
Which entity in your portfolio is the weakest link, and who else knows it? Growth through acquisition or expansion brings uneven security maturity, shared infrastructure, and coverage gaps that tend to surface only after a loss, and attackers pay close attention to deal activity.
In this session, Judson Dressler of Resilience moderates a conversation with Matthew Mettenheimer of S-RM and Travis Wong of Resilience on how ransomware and supply chain actors target multi-entity organizations, how losses add up across subsidiaries, and what finance, risk, and security leaders should ask about controls and cyber due diligence at every stage of growth.
About Speakers
Matthew Mattenheimer
Director of Risk and Resilience at S-RM
Matt Mettenheimer is a Director in S-RM’s Cybersecurity Risk & Resiliency practice. He specializes in developing large-scale multinational security programs, providing vCISO services, developing security governance programs, conducting cybersecurity maturity assessments (NIST, ISO, FFIEC, CMMC, etc.), and creating, developing, and assessing third-party risk management.
Matt has collaborated with thought leaders across the industry to address key cyber trends such as AI, regulatory compliance, and Third-Party Risk. Additionally, Matt works with lead Private Equity firms & Cyber Insurance firms to identify and manage cyber risks across their portfolios.
Matt has experience in responding to and remediating regulatory consent orders and providing program defense against regulators and external auditors. He also provides risk management advisement during post-incident activities to remediate identified findings and strengthen customer trust.
Travis Wong
VP of Customer Engagement
Travis Wong is the VP of Customer Engagement at Resilience. He leads the Security and Risk Services and Customer Success teams and brings over 15 years of experience in risk management consulting, helping clients assess, measure, and manage their risk effectively.
Judson “Jud” Dressler
Director, Risk Operations Center
Judson Dressler is the Director of the Risk Operations Center. Dressler recently joined Resilience after serving 20 years in the U.S. Air Force. He was previously the Permanent Professor and Head of the Department of Computer and Cyber Sciences at the United States Air Force Academy, where he taught more than 1,200 cadets each year and conducted long-term artificial intelligence and cybersecurity research.
He served as the Commander of the 835th Cyberspace Operations Squadron, where he led 134 cyber airmen to conduct threat-focused, intelligence-driven defensive cyberspace operations. Dressler holds a PhD in Computer Science from Rice University and a Master’s in Computer Science from the U.S. Air Force Institute of Technology.
Any company that sells hardware or software with network connectivity into an EU member state has to report vulnerabilities and incidents affecting that product. The regulation calls these products with digital elements, and it applies to the manufacturer regardless of where the manufacturer is based, so a US firm with no EU presence is covered from the moment its first unit ships into the single market.