Cybersecurity & Evolving Governance
The Procurement Decision: Where Cybersecurity Governance Begins
Author(s):
Bobbie Stempfley, Vice President | Dell Technologies , Former CIO, Defense Information Systems Agency (DISA)
Dr. Ray A. Letteer, DSc, Former Director of Operations Risk Assessment, Office of the DoD Chief Information Officer, Former Chief Information Security Officer (CISO), Authorizing Official (AO), United States Marine Corps
Henry J. Sienkiewicz, Adjunct Faculty | Georgetown and George Washington Universities, Former CIO, Defense Information Systems Agency (DISA)
Keith K. Nakasone, Independent Consultant, ProcureTech Consulting, LLC
Every significant cybersecurity incident begins with a trust decision. Long before an adversary exploits a vulnerability, before a System Owner assumes operational responsibility, before an Authorizing Official accepts residual risk, and before
Bobbie Stempfley is a cybersecurity executive and former Chief Information Officer of the Defense Information Systems Agency, where she helped lead secure IT modernization across the Department of Defense. As an authorizing official for defense-wide capabilities, she worked at the point where mission urgency, technical risk, and accountability meet. Her experience bridging the public and private sectors shapes her work at the intersection of transformation and trust, helping institutions modernize security authorization while sustaining mission confidence, accountability, and resilience.