Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Careers & People

12/15/2016
04:45 PM
Connect Directly
Twitter
RSS
E-Mail
50%
50%

Amit Yoran Leaves Dell RSA To Join Tenable As New CEO

Yoran says recent Dell acquisition of RSA parent company EMC did 'not really' impact his decision to leave.

Vulnerability management firm Tenable Network Security announced today that Dell RSA President Amit Yoran will take over as Tenable's new chairman and CEO, effective Jan. 3, 2017. The announcement comes three months after Dell closed on the acquisition of RSA's parent company, EMC. 

Yoran, 46, will succeed Ron Gula, who founded Tenable 14 years ago and resigned from his position as the company's CEO in June. Tenable co-founders Jack Huffard and Renaud Deraison, who have been leading the company during the CEO search, will continue in their roles as president and chief operating officer (COO), and chief technology officer, respectively.

Dell completed its $67 billion acquisition of EMC in September; rumors about the deal first surfaced the previous autumn. Asked if the Dell acquisition had any impact on his decision to leave, Yoran said in a discussion with Dark Reading today, "Not really."

Mergers and acquisitions, says Yoran, are a normal part of business. (He joined RSA in the first place when it acquired NetWitness, a company he co-founded.) Despite his decision to depart, Yoran says, "I firmly believe in the vision [at Dell RSA] and they have an excellent executive team in place to deliver on that vision."

The move to Tenable, he says, is because he's excited about what they do there.

Tenable's core capabilities are in monitoring and improving visibility. One critical aspect of any cybersecurity department, says Yoran, is "what is my level of vulnerability ... Having that mapped out and understood is a foundational capability."

This capability is Tenable's "DNA," he says.

"I think the key to success is knowing who you are and delivering best-of-breed capabilities," says Yoran. Tenable succeeds because it isn't "trying to do 482 things."

Nevertheless, Tenable does plan on growing, expanding into new markets, and releasing new products in the coming months. Yoran explains that this growth, however, will still be aligned with the company's core goal of helping CISOs answer the 'how vulnerable am I' question. As he explains, businesses regularly adopt new technology (IoT, containers, etc.), which exposes them to new vulnerabilities; Tenable will invest in ways to better help customers assess their degree of exposure to those vulnerabilities. 

Tenable raised $230 million late in 2015 to make new investments and completed an acquisition of small San Francisco-based container security firm FlawCheck in October.

Yoran is taking on another role as head business leader of a cybersecurity company - first NetWitness, then RSA, now Tenable - but he is a graduate of the US Military Academy, and was the director of the US Department of Homeland Security's National Cyber Security Division prior to joining NetWitness. Yoran does not seem keen to ever return to the public sector.  

Yoran says, "I appreciate the time I spent [in government]," and appreciates the people who continue to work there, but that he feels he himself can personally can have a better impact on security working in business. "There's more scale, greater agility in the private sector."

As for Tenable specifically, Yoran says the company has "an incredible future ahead of it."

Related Content:

 

 

 

Sara Peters is Senior Editor at Dark Reading and formerly the editor-in-chief of Enterprise Efficiency. Prior that she was senior editor for the Computer Security Institute, writing and speaking about virtualization, identity management, cybersecurity law, and a myriad ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-1927
PUBLISHED: 2020-04-02
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
CVE-2020-8144
PUBLISHED: 2020-04-01
The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, does not validate firmware download destinations to ensure they are within the intended destination directory tree. It accepts a request with a URL to firmware u...
CVE-2020-8145
PUBLISHED: 2020-04-01
The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup� and “wizard� endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLIC_GROUP ...
CVE-2020-8146
PUBLISHED: 2020-04-01
In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The issue was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the win...
CVE-2020-6009
PUBLISHED: 2020-04-01
LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.