Securing the Future: Leading with Technology, Integrity, and Preparedness

Roy Bené, Chief Infrastructure and Security Officer, the City of Irving

Roy Bené brings over 25 years of IT and Information Security experience, starting in the military and now serving as Chief Infrastructure and Security Officer for the City of Irving, Texas. In this role, he has led improvements in the city’s IT program, including next-generation firewalls, VPNs, and endpoint protection. Previously, Roy was IT Director for Publishing Concepts, driving initiatives in continuing education, data retention, and security upgrades. As IT Director and CISO at NexBank SSB, he implemented secure technologies and enhanced cybersecurity programs. Before his banking career, Roy worked as an IT consultant. Outside of IT, Roy is a Le Cordon Bleu graduate and runs a cooking school in Salem, Massachusetts. A dedicated charity advocate, he supports Make-A-Wish, Veterans of Foreign Wars, and other organizations.

Leveraging Advanced Technologies for Protection and Threat Detection

Security is more important than ever in today’s rapidly evolving technological landscape. To safeguard our infrastructure, we rely on cutting-edge tools like Palo Alto’s next-generation technology for firewall, endpoint protection, and VPN services. We also utilize advanced solutions like Halcyon and Recon Infosec’s mobile Security Operations Center (SOC) for predictive analytics and behavior analysis. These tools enable us to identify potential threats before they escalate, providing an added layer of defense.

Additionally, technologies like SSL decryption and ProofPoint email scanning ensure that communication channels remain secure. Proofpoint also helps us learn from malicious behaviors by thoroughly scanning emails, preventing threats from ever reaching our networks. By leveraging these advanced technologies, we maintain a robust defense against ever-evolving cyber threats.

Cautious Technology Adoption and Cybersecurity Awareness

While we adopt new technologies to outpace emerging threats, we approach this adoption cautiously. Our controls, policies, and procedures ensure that introducing technologies like AI and IoT devices is done responsibly and securely. We collaborate closely with other municipalities and keep communication lines open with our users to ensure they are always informed and aware of the latest changes.

A key part of this approach is our comprehensive cybersecurity awareness program. We regularly conduct mock phishing campaigns to test our team’s readiness and enhance their awareness. This proactive stance helps ensure the workforce remains prepared for any potential cybersecurity challenge.

Ensuring Readiness through Drills and Continuity Plans

Readiness is paramount in high-pressure situations, such as the failure of critical infrastructure like pumping stations. We work closely with all departments to conduct tabletop drills that align with our business continuity and incident response plans. These drills ensure the team is well-prepared to respond swiftly and effectively during a crisis. The importance of diligence in these situations cannot be overstated—our team’s ability to remain calm and focused during such challenges is crucial to ensuring minimal disruption.

"AI can enhance infrastructure, automate processes, and improve the user experience, but it also comes with inherent risks that must be managed responsibly."

The Responsible Adoption of AI: Balancing Innovation and Risk

The adoption of AI is inevitable. The question is not if but when and how it will be integrated. AI can enhance infrastructure, automate processes, and improve the user experience, but it also comes with inherent risks. If implemented irresponsibly, AI can compromise security and damage an organization’s reputation. Furthermore, AI is susceptible to biases and misinformation, raising ethical and operational concerns. We must tread carefully when adopting AI, balancing its transformative potential with the risks it introduces.

Navigating Change and Building Trust in IT and Security

Change is often uncomfortable and rarely transparent in IT and security. Yet, embracing it is crucial. While resistance to change is natural, it’s vital to prioritize clear communication over politics, focusing on helping others understand the necessity and benefits of the changes.

By demonstrating the value you bring, you often eliminate the need to explain the reasons behind the change—your actions will have already made the case.

When pushing for change, it's essential to communicate effectively and educate those around you. Sometimes, what seems like common sense to you may not be obvious to others, so take the time to help them understand. Your role is to lead, educate, and be helpful—without letting your ego interfere. Be kind but firm. Standing your ground, even when faced with political challenges, will earn you respect and credibility.

Surrounding yourself with leaders who have your back is crucial. It may cost you a job or two, but standing by your integrity is far more important.

Ultimately, your reputation and ethical principles will stand firm, serving as the most valuable assets in your leadership journey.

AI

Information Security

Firewall

Cyber Threats

Predictive Analytics

IoT

Critical Infrastructure

Business Continuity

Test