David White is founder and Chief Knowledge Officer at Axio Global — a cyber risk-engineering firm that helps organizations comprehensively manage cyber risk by harmonizing cybersecurity controls and cyber risk transfer. David works directly with Axio clients and is responsible for Axio’s Risk Action Framework and associated methods, including cybersecurity program evaluation, cyber loss scenario analysis, insurance program analysis, and benchmarking.

David developed Axio’s scenario-based cyber risk quantification process and has delivered that methodology at numerous customers within the energy, manufacturing, and entertainment sectors.

Axio provides a number of cyber risk services to AIG, the world’s largest insurer. David serves as the technical lead for the relationship with AIG. In that role, he consults on cyber underwriting methods and supports cyber underwriting efforts related to energy sector insurance clients and clients seeking coverage for cyber predicated property damage and bodily injury.

Previously, David worked in the CERT Program at Carnegie Mellon, a cybersecurity research program primarily funded by the US Department of Defense and Department of Homeland Security. He provided technical leadership for a portfolio of cybersecurity maturity models, diagnostic methods, research, and training.

David served as chief architect for the Electricity Subsector Cybersecurity Capability Maturity Model (ES-C2M2), and assisted with the oil-and-natural-gas and industry-agnostic versions (ONG-C2M2 and C2M2). David co-authored the CERT Resilience Management Model (CERT- RMM) and was the chief architect for the Smart Grid Maturity Model (SGMM).