Skip to Main Content

Rick Yocum


Rick Yocum has been helping organizations elevate their security and compliance practices for more than 16 years. Rick has consulted for—and led—InfoSec programs at organizations of all sizes and in nearly all industries, and has extensive experience in the fields of education, finance, government, manufacturing, logistics, and service delivery. Pragmatic and resourceful, Rick provides actionable security and compliance solutions through a combination of simplification, creative reuse of existing tools/processes, and the application/reinforcement of proven security and compliance patterns.


  • Bachelor of Science, Accounting Information Systems, Duquesne University
  • Bachelor of Science, Management Information Systems, Duquesne University
  • Certified Data Privacy Solutions Engineer (CDSPE), ISACA
  • ISO Lead Auditor, BSI


Rick is an active participant in the InfoSec community and has spoken at a variety of industry events including BSides, ISSA, IANS, and the CSO Breakfast Club. He currently serves on the organizing committee for BSides Pittsburgh.


Rick is passionate about identifying and exploring creative ways to enhance security and compliance programs—from using theater to train Incident Response teams to utilizing iconography to communicate the nature and status of control environments. Additionally, Rick is working on programs to better leverage behavioral economics, game theory, and psychology-adjacent fields to improve organizational security posture and reduce an industry-wide shortage of skilled security practitioners.

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.