Lucas Hathaway

Lucas Hathaway has 10+ years of experience in information security. He is the Chief Revenue Officer at Rivial Data Security. He has worked with Rivial clients for years leading the consulting team and now leads the growth team with a focus on client success ensuring that Rivial’s platform exceeds client expectations.

2 min read

NIST Compliance: The Ultimate Guide

Lucas Hathaway: 05 Feb 2025

Here are the key features in this blog: NIST compliance offers financial institutions a structured approach to managing cybersecurity risks, using frameworks like NIST SP 800-53 (security controls) and SP 800-55 (performance measurement). Adopting...

3 min read

NIST 800-55: The Ultimate Guide

Lucas Hathaway: 28 Dec 2024

Here are the key takeaways from the blog: Risk-based, outcome-focused metrics: NIST 800-55 shifts the focus from compliance to measuring the...

4 min read

10 Best Virtual CISO Services for 2025

Lucas Hathaway: 11 Dec 2024

For security leaders responsible for safeguarding critical business data, choosing the right vCISO (Virtual Chief Information Security Officer)...

7 min read

Integrating MITRE ATT&CK within Security Risk Assessments

Lucas Hathaway: 25 Oct 2024

Here are key takeaways from the blog: Traditional Risk Assessments Fall Short: Most IT risk assessments overlook real-world adversary behavior....

4 min read

AI Risk Assessment: A Roadmap for Financial Institutions

Lucas Hathaway: 11 Oct 2024

Here are the key takeaways from this blog: AI Introduces New, Critical Risks: From data privacy breaches to algorithmic bias, AI systems in financial...

Properly Assessing Third and Fourth Party Cybersecurity

5 min read

How to Assess 3rd vs 4th Party Risk Management

Lucas Hathaway: 27 Sep 2024

Here are the key takeaways from this blog: Third- & Fourth-Party Risk Is a Growing Threat: Breaches increasingly originate from vendors—not your own...

3 min read

Preparing for FFIEC CAT Sunset: Key Takeaways for Financial Institutions

Lucas Hathaway: 30 Aug 2024

The Federal Financial Institutions Examination Council (FFIEC) has announced that it will phase out its Cybersecurity Assessment Tool (CAT) by August...