Paul E. Proctor VP Distinguished Analyst Solana Beach, CA USA Years of Experience 6 years at Gartner 24 years IT industry Areas of Coverage Security & Privacy Regulatory Compliance View Latest Research Resources Create Analyst Alert Contact Gartner Roles and Responsibilities Paul Proctor is a vice president, distinguished analyst, and the role service director for security and risk management. His coverage includes enterprise and IT risk management, security program management, and compliance. His primary market coverage includes data loss prevention, IT GRC management, and continuous controls monitoring, with secondary coverage in enterprise monitoring, IDS/IPS and event log management. Previous Experience Mr. Proctor has been involved in information security and risk management since 1985. He was founder and CTO of two security technology companies and developed first- and second-generation host-based intrusion-detection technologies. Mr. Proctor is a recognized expert in the field of information security and associated regulatory compliance issues surrounding the Health Insurance Portability and Accountability Act, the Sarbanes-Oxley Act, and the Gramm-Leach-Bliley Act. He has authored two Prentice Hall books and many white papers and articles. Mr. Proctor is an accomplished public speaker and was recognized for his expertise by being appointed to the original Telecommunications Infrastructure Protection working group used by Congress to understand critical infrastructure protection issues prior to the terrorist attack of Sept. 11. Previously, he worked for SAIC, Centrax, CyberSafe, Network Flight Recorder and Practical Security. Professional Background SAIC, Engineering Manager, 10 years Centrax Corporation, Founder and Chief Technology Officer, 2 years Cybersafe Corporation, Chief Technology Officer, 3 years Education B.S., Mathematics/Computer Science, University of Illinois LATEST RESEARCH More by this author Title Publish Date Author(s) Predicts 2010: Infrastructure Protection Is Still Not 'One Size Fits All' 18-Nov-2009 Ray Wagner, Peter Firstbrook, Paul E. Proctor, Eric Ouellet, Lawrence Orans, John Pescatore, Adam Hils Best Practices for Data Security Breach Disclosure 11-Nov-2009 Avivah Litan, Carsten Casper, Paul E. Proctor Highlights From the Security and Risk Management Track at Symposium/ITxpo 10-Nov-2009 Paul E. Proctor Vendor Rating: SAP 13-Oct-2009 Thomas Otter, Peter Wesche, Daniel Sholler, Yvonne Genovese, Christian Hestermann, Jeff Woods, Deborah R Wilson, Tim Payne, John Rizzuto, Ed Thompson, Alexa Bona, Robert P. Desisto, Nigel Rayner, John E. Van Decker, Gene Alvarez, Regina Casonato, Paul E. Proctor, Andreas Bitterer, Bob Igou, William Clark, James Holincheck, C. Dwight Klappich, Sharon A. Mertz, Kristian Steenstrup, Janelle B. Hill, Andrew White, Tom Eid A New Approach: Obtain Business Ownership and Investment Commitment for Business Continuity and Resilience Management Through Key Performance and Risk Indicator Mapping 07-Oct-2009 Roberta J. Witty, Paul E. Proctor, Michael Smith