Ross Young is the CISO of Caterpillar Financial Services Corporation, a CISO Tradecraft Podcast Co-Host, a Johns Hopkins University Instructor, and the Creator of the OWASP Threat and Safeguard Matrix (TaSM). Previously, he was a divisional CISO at Capital One and has over a decade worth of experience across CIA, NSA, and the Federal Reserve Board. His expertise ranges from attacking financial services for the federal government to defending organizations by automating defenses in Cloud Security and DevSecOps pipelines. Ross holds master's and bachelor's degrees from Johns Hopkins University, Idaho State University, and Utah State University. Ross is also designated as a Boardroom Certified Qualified Technology Expert (QTE) and a Certified Information Systems Security Professional (CISSP).