Brian Paap

Standards Area Lead for Cyber-Supply Chain Risk Management (C-SCRM)


Brian Paap serves as the Standards area lead for Cyber-Supply Chain Risk Management (C-SCRM) at the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA).

Previously, Mr. Paap served as a Cybersecurity architect in the IC developing cybersecurity capabilities for satellites systems with the National Reconnaissance Office (NRO). Prior, Mr. Paap was the Cybersecurity International and DHS Liaison Chief for US-CERT under the National Cybersecurity and Communications Integration Center (NCCIC). In Mr. Paap’s current role, he brought 200 government C-SCRM subject matter experts together to illuminate supply chain shortcomings and used the community experts to carve a collective path towards sharing information, strategic vision, as well as breaking down barriers between Acquisitions, Cybersecurity, and Risk for C-SCRM.

Mr. Paap has served in many roles over 27 years including SOC Operations Manager for the State Department and Federal Aviation Administration, Cybersecurity architect with the Department of Defense, and Intelligence analysis with the FBI National Cyber Investigative Joint Task Force while a federal employee with DHS.