Andrew Hoover is a Senior Engineer with the CERT Division of Carnegie Mellon University’s Software Engineering Institute. As a member of the Cybersecurity Assurance Team, he performs risk and resilience management work for a variety of organizations, mostly relating to critical infrastructure protection. Andrew has 16 years of experience in information technology field. Prior to joining the SEI, he worked as a technical auditor performing risk and vulnerability assessments for government and industry clients. In addition to the customer focused work Andrew teaches the public offering of the CERT Resilience Management Model (CERT-RMM) course.