Clinic Resources

Featuring Jeremy Gibb, Global Cybersecurity Governance, Risk, & Compliance Leader and Managing Director at Deloitte, this final session of the San Diego Cyber Clinic’s fall webinar series explored career growth, leadership, and lessons learned throughout his 27-year career. Jeremy shared advice on embracing change, investing in talent, learning from failure, building strong professional networks, and standing out in interviews through preparation and a commitment to continuous improvement.

Featuring Kris Virtue, Vice President and Chief Information Security Officer at Qualcomm, this webinar explores how a Fortune 500 company approaches cybersecurity. Kris discusses the structure and responsibilities of enterprise security teams, the lifecycle of cyberattacks, and evolving challenges such as third-party risk and AI. He also shares insights into cybersecurity career paths, emphasizing the importance of curiosity, a hacker mentality, and problem-solving skills alongside technical expertise.

Featuring Blair Canavan, Director of Alliances for PKI and PQC portfolios at Thales, this discussion explores the evolving landscape of post-quantum cryptography (PQC) and the challenges of transitioning to quantum-safe security. Blair discusses the importance of cryptographic agility, moving from existing RSA and ECC algorithms to quantum-safe alternatives, and practical steps organizations can take now, including cryptographic inventory and discovery, zero-regret moves, and cryptographic bills of materials (CBOMs). He also shares insights on emerging regulations and vendor requirements, preparing for compliance timelines, and strategies for assessing risk and making software quantum safe.

Featuring Mandiant’s Nick Pelletier, Managing Director, and Ben Trachtenberg, Manager—both founding mentors of the San Diego Cyber Clinic—this discussion explores the anatomy of recent cyberattacks and the evolving threat landscape. Drawing on insights from Mandiant’s 2025 investigations, they discuss emerging attack vectors including public-facing vulnerabilities, voice phishing and social engineering, cloud compromises, supply chain attacks, and state-sponsored espionage, along with the growing role of AI in cyberattacks. They also share practical insights on detection, vulnerability management, backup resilience, and protecting organizations against today’s most persistent threats.