Jonathan Risto
Principal InstructorTechnical Director, Cyber Posture Management Program at Government of Canada
Specialities
Cybersecurity Leadership
SEC504: Hacker Tools, Techniques, and Incident Handling
SEC504Offensive Operations
LDR516: Building and Leading Vulnerability Management Programs
LDR516Cybersecurity Leadership
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 29 Hours of hands-on instruction
Virtual Events
Explore content featuring this instructor’s insights and expertise.
- Slide 1 of 10
Cyber42 Vulnerability Management
In this CloudSecNext 2022 session of Cyber42 Vulnerability Management you will play to win! In this 90-minute game day you will play individually to improve the state of a fictional organization and more effectively handle the vulnerability management.
WebinarCyber Defense
- 3 May 2022
- 13:00 UTC
- Jonathan Risto, David Hazar & Christopher Denney
- Slide 2 of 10
Vulnerability Management - Finding Context
Do you ever run into problems with your vulnerability management program that you wished you had at your fingertips just one more little piece of information? To help conduct some prioritization, or to know who the business owner is, or to inform people this was an end of life system… All valuable and great to have readily available. But alas, we often are missing information, or it is not easy to access.
WebinarCyber Defense
- 20 Jul 2022
- 15:00 UTC
- Jonathan Risto
- Slide 3 of 10
Vulnerability Management - Is the Program Effective?
So you have a vulnerability management program. Great. Excellent. But are you able to let the management team know if it is being effective or not?
WebinarCyber Defense
- 14 Sep 2022
- 15:00 UTC
- Jonathan Risto
- Slide 4 of 10
Understand Vulnerability Management Maturity with a Self-Assessment Tool
Use the newest tool to self-assess your organization's vulnerability management maturity, built on the renowned SANS Vulnerability Management Maturity Model (VMMM).
WebinarCybersecurity Leadership
- 6 Jun 2023
- 10:00 UTC
- Jonathan Risto
- Slide 5 of 10
Navigating the Serverless, Containerized, and IaC Vulnerability Management Revolution
They promised it would be a breeze! Serverless functions, containers, and infrastructure as code were supposed to simplify vulnerability management. But hold onto your seats, because we'll dive into why these technologies demanding a whole new set of skills, tools, and a mindset shift for anyone in the game. Are you ready to shake up your vulnerability management game? Join us as we discover the must-have skills and attitude adjustments for staying on top.
WebinarCyber Defense- 26 Oct 2023
- 10:00 UTC
- Jonathan Risto
- Slide 6 of 10
The Achilles Systems Hack Assessment Series: Getting Strategic with Vulnerability Management - Part 3 of 4 for Operational Leadership
In this webcast, we will quickly review the incident affecting Achilles Systems, including their basic “block and tackle” approach to vulnerability management.
WebinarCybersecurity Leadership- 10 Jun 2024
- 13:00 UTC
- Jonathan Risto
- Slide 7 of 10
Understanding Continuous Threat Exposure Management (CTEM)
In today’s dynamic cybersecurity landscape, traditional vulnerability management often falls short due to the continual changes, modifications, and adoption of new technologies. Continuous Threat Exposure Management (CTEM) offers a transformative approach, enabling organizations to anticipate, prioritize, and address vulnerabilities more effectively.
WebinarCybersecurity Leadership- 12 Mar 2025
- 13:00 UTC
- Jonathan Risto
- Slide 8 of 10
Beyond the Patch: Measuring the Unknown in Vulnerability Management
Vulnerability management is no longer just about finding CVEs and deploying patches—it's about closing the gap between what you know and what you don’t see coming.
WebinarCybersecurity Leadership- 11 Jun 2025
- 13:30 UTC
- Jonathan Risto
- Slide 9 of 10
Risk Rules Everything Around Me: Making Smart VM Decisions Without the Guesswork
Not all vulnerabilities are created equal—and fixing everything just isn’t realistic. This session shows how to align vulnerability prioritization with real-world risk.
WebinarCybersecurity Leadership- 23 Jul 2025
- 12:00 UTC
- Jonathan Risto
- Slide 10 of 10
Vulnerability Management That Matters: Telling the Right Story to Drive Action
You’ve patched systems and prioritized risk—but if your stakeholders don’t understand what you’re doing or why it matters, progress stalls.
WebinarCybersecurity Leadership- 6 Aug 2025
- 10:00 UTC
- Jonathan Risto