8 · 8 · 2026ROOT · 01

With gratitude to Mother Earth, Great Spirit, the One — and whatever name we give the greater mystery. Thank you for the time, the work, the people, and the opportunity to serve.

01 / 13HIGH DESERT DAWN

PROJECT SANTA FE EYE · PUBLIC-SECTOR CIO · NEW MEXICO

EXECUTIVE OPERATING POSITION

Govern risk. Modernize critical systems. Build public trust.

00 / 4260 SEC MAIN SCREEN

Gavin Lujan is a New Mexico CIO, CISSP and CCSP who turns cybersecurity, infrastructure and responsible AI into durable public capability. Twenty-five years of technical depth meet executive accountability—rooted in Española and built for consequential systems.

SECURITY ARCHITECTURE · LIVE01 / 09
NIST CSF 2.0 · ENTERPRISE OUTCOMES
GOVERNDirection · oversight
IDENTIFYPROTECTDETECTRESPONDRECOVER
Make cyber risk visible to the enterprise.

Six functions connect mission priorities, investment, controls, operations, and resilience.

NIST RMF · SYSTEM LIFE CYCLE
PREPARECATEGORIZESELECTIMPLEMENTASSESSAUTHORIZEMONITOR
Authorize with evidence. Monitor with intent.

Risk decisions remain connected to system context, control performance, and meaningful change.

ZERO TRUST · RESOURCE-CENTERED DEFENSE
REQUEST
POLICYverify continuously
RESOURCE
IDENTITYDEVICECONTEXTRISK
Never trust by location alone.

Make access decisions from identity, device, context, policy, telemetry, and least privilege.

NIST AI RMF · HUMAN-ACCOUNTABLE AI
HUMAN
AUTHORITY
GOVERNMAPMEASUREMANAGE
Bound autonomy before scaling capability.

Govern data, permissions, models, tools, evidence, failure modes, and human approval.

NEW MEXICO SOC GIS · CRITICAL CONNECTIVITY
GOD'S-EYE INFRASTRUCTURE VIEWNETWORK ACTIVITY · SIMULATED
FARMINGTONBACKBONE NODE GALLUPWEST GATEWAY ALBUQUERQUECORE EXCHANGE SANTA FEGOVERNMENT NODE LAS CRUCESSOUTH GATEWAY ROSWELLREGIONAL NODE CLOVISEAST GATEWAY HOBBSENERGY CORRIDOR
MAJOR CITY NODES08CONNECTIVITY MODEL
BACKBONE CORRIDORS05I-25 · I-40 · I-10 · REGIONAL
OUTAGE INDICATORUNVERIFIEDNO LIVE CARRIER FEED ATTACHED
CARRIER REFERENCE LAYERSLUMEN / CENTURYLINKVERIZONAT&TT-MOBILEZAYO / REGIONAL FIBER
OPERATIONALWATCHOUTAGEUNVERIFIED
CONCEPTUAL SOC / POLICY VIEW · GIS POSITIONS AND CORRIDORS ARE ILLUSTRATIVE · NOT LIVE CARRIER TELEMETRY
See connectivity as statewide mission infrastructure.

Correlate cities, fiber corridors, carriers, public services, cyber events, and verified outage data before making policy or operational decisions.

CIS CONTROLS v8.1 · 18 PRIORITIZED ACTIONS
01 Enterprise Assets02 Software Assets03 Data Protection04 Secure Configuration05 Account Management06 Access Control07 Vulnerability Management08 Audit Logs09 Email + Browser10 Malware Defenses11 Data Recovery12 Network Infrastructure13 Network Monitoring14 Awareness + Skills15 Service Providers16 Application Security17 Incident Response18 Penetration Testing
Use the current 18—not the retired “Top 20.”

Start with Implementation Group 1, then scale safeguards according to mission, exposure, resources, and consequence.

CIS BENCHMARKS · HARDENING COVERAGE
TECHNOLOGYL1 BASELINEL2 DEFENSEEVIDENCE
CLOUDIAM · loggingnetwork · keysCONFIG SCAN
OPERATING SYSTEMSaccounts · servicesaudit · cryptoHOST POSTURE
CONTAINERSimages · runtimeadmission · secretsPIPELINE GATE
NETWORK DEVICESmanagement planerouting · telemetryCONTROL TEST
DATABASESauth · defaultslogging · encryptionDATA CONTROL
Configuration is a measurable security control.

CIS publishes 100+ consensus-developed Benchmarks across more than 25 vendor product families.

OWASP TOP 10:2025 · APPLICATION RISK
A01Broken Access ControlA02Security MisconfigurationA03Software Supply Chain FailuresA04Cryptographic FailuresA05InjectionA06Insecure DesignA07Authentication FailuresA08Software or Data Integrity FailuresA09Security Logging and Alerting FailuresA10Mishandling of Exceptional Conditions
Design, build, test, and observe the whole application lifecycle.

The 2025 release is OWASP’s current awareness standard for critical web-application risks.

EXECUTIVE THREAT 20 · OPERATIONAL WATCHLIST
IDENTITY01 Credential theft02 MFA bypass03 Privilege abuse04 Session hijack05 Service accounts
EXPOSURE06 Known exploits07 Edge devices08 Cloud misconfig09 Shadow assets10 Third parties
APPLICATION + DATA11 Supply chain12 Injection13 API abuse14 Data extortion15 AI agent misuse
RESILIENCE16 Ransomware17 OT disruption18 DDoS19 Recovery failure20 Disinformation
Watch paths to consequence—not headlines alone.

This is a curated operating taxonomy, not an asserted universal ranking. Validate it against mission, assets, intelligence, and observed behavior.

ZIAWOLF SIGNAL · LIVE01 / 03
NEW MEXICO · EXECUTIVE SIGNALFIERCE CLARITY.
HUMAN ACCOUNTABILITY.

Cybersecurity, responsible AI and mission resilience—seen as one operating system.

AI / HPCCONTROL PLANE
COMPUTE · IDENTITY · ENERGYSECURE THE SYSTEM BEHIND THE MODEL.

Govern privileged access, schedulers, model registries, storage fabrics, power, cooling and recovery.

CISODECISION ADVANTAGE
RISK · TRUST · CONSEQUENCETURN SIGNAL INTO ACTION.

Prioritize exposure reduction, identity assurance, telemetry, tested recovery and accountable governance.

35.0844° N RISK / TRUST / CONSEQUENCE NEW MEXICO, USA
25+Years leading technology
2× CIONew Mexico public service
600K+Annual transactions supported
$115M+Annual mission revenue enabled
CISSP · CCSPSecurity leadership

CHOOSE THE LENS

One career.
Three ways in.

Start with the evidence most relevant to your mission. The deeper command systems remain available without competing for the first impression.

8 · 8 · 2026 EXECUTIVE POSITIONING

Security leadership.
Research-scale technology.

Two complementary lanes built from the same career: protect complex public institutions, and create reliable technology environments where people can do consequential work.

STATEWIDE CISO READINESS

Cybersecurity as public trust.

Executive governance across NIST CSF, RMF and 800-53; Zero Trust; identity; resilience; PCI; risk evidence; incident readiness; policy; cloud security; and clear communication with leaders, technologists and the public.

  • CISSP + CCSP with continuing governance, risk and compliance study
  • Security leadership embedded across multiple CIO and infrastructure roles
  • Human-centered leadership that develops staff and makes accountability visible
  • Responsible AI governance: embrace capability while bounding data, permissions, evidence and human authority
RESEARCH CIO READINESS

Strategy with hands-on roots.

Leadership grounded in Linux, mission-critical computing clusters, high-speed interconnects, enterprise networking, virtualization, cloud, storage, continuity, multi-site operations and service management.

  • Hewlett-Packard mission-critical Linux / clustered-computing experience
  • Statewide network and infrastructure leadership
  • Budget, vendor, procurement, portfolio and modernization governance
  • Disciplined prioritization across simultaneous mission demands
TIME IS THE NONRENEWABLE ASSET.

Prioritize deliberately. Protect focus. Empower capable people. Use automation and AI responsibly. Reserve human attention for judgment, relationships and the decisions that matter.

GV-01 / 400 organizational context: define the mission outcome NIST CSF · NEXT SIGNAL 10 SEC

CURRENT AI / CYBERSECURITY EVENTS & INCIDENTS

The signal beyond the dashboard.

A concise executive feed focused on operational consequence, not panic. Incidents are curated from public reporting and primary advisories, with attribution uncertainty stated plainly.

GLOBAL CYBER INTELLIGENCE · ACTIVE
READY · CISA KEV + NIST NVD · SELECT UPDATE
ACTIVE PANE / TOP 10

Current exploited-threat queue

Ranked for executive awareness. Validate exposure and business relevance before action.

EDITORIAL INTELLIGENCE / CONTEXT
HIGH · CRITICAL INFRASTRUCTURE JUL 30–31, 2026

Water systems targeted across multiple states

Federal investigators are examining attacks affecting water and wastewater operators in at least seven states. More than 30 Minnesota community systems were reportedly targeted, with some operational disruption, password changes, pressure loss, or manual recovery activity.

Sector: Water / OT Status: Investigation ongoing Impact: Operations disrupted Attribution: Not final
Read Reuters reporting →
WATCH · AI WEAPONIZATION JUL 14, 2026

AI moves from assistant to attack operator

Recent threat research describes AI performing hands-on work within live intrusions, accelerating malware development, reconnaissance, exploitation, and operational decision-making. The governance question is no longer whether attackers use AI, but where autonomy changes the risk curve.

Vector: Agentic operations Risk: Speed and scale Control: Human authorization Need: Behavior monitoring
Read the 2026 AI Security Report →
ANALYSIS · ATTACK PATTERNS JUN 3, 2026

Real-world AI cyber activity mapped to MITRE ATT&CK

Anthropic researchers mapped observed AI-enabled cyber operations to ATT&CK techniques, highlighting how models can lower barriers, compress timelines, and broaden tactical reach even when the actor is not highly sophisticated.

Framework: MITRE ATT&CK Focus: Real-world misuse Lesson: Capability diffusion Action: Threat-model agents
View the research →
RESILIENCE · WATER SECURITY MAY 21, 2026

GAO warns water cyber risk remains persistent

The Government Accountability Office emphasized that connected operational technology, constrained staffing, and uneven cybersecurity maturity leave water and wastewater systems exposed to threat actors capable of causing service and public-health consequences.

Source: U.S. GAO Scope: National Exposure: Connected OT Priority: Sector strategy
Read the GAO testimony →
01 · REDUCE EXPOSURERemove unnecessary internet access to operational technology. 02 · CONTROL IDENTITYReplace defaults, require MFA, and separate privileged access. 03 · PRESERVE MANUAL CONTROLPractice safe fallback operations before an incident. 04 · GOVERN AI AGENTSBound tools, permissions, data, logging, and human approval.
Editorial note: Reporting on the water incidents is evolving. Federal agencies had not issued a final public attribution at the time of this update. The feed presents operationally relevant facts and labels unresolved claims rather than turning uncertainty into theater.

RANGER-INSPIRED · SOC / NOC COMMAND VISIBILITY

See the traffic.
Control the consequence.

A unified executive view of network conversations, enforcement points, control health, and operational risk. Designed to make technical signals legible at the leadership table.

COLLECTORS UPDATED · JUST NOW
GL / SECURITY OPERATIONSACTIVE CONVERSATION PLANE
FLOW RATE724 Mb/sNORTH / SOUTH + EAST / WEST
OBSERVED ASSETS148142 HEALTHY · 6 REVIEW
CONTROL HEALTH98.6%NIST CSF / RMF EVIDENCE
OPEN SIGNALS071 HIGH · 2 MEDIUM · 4 WATCH
AGGREGATE NETWORK TRAFFICConversation velocity / 24-hour plane
INBOUND OUTBOUND
HTTPSDNSSSHSMBPOSTGRESBLOCKED
ENFORCEMENT TOPOLOGYTrust zones and control points
LIVE SIM
INTERNET
UNTRUSTED
EDGE FWIPS · WAF · GEO
SECURITY CORESIEM · NDR · IAM
APPLICATIONSAPI · WEB · DATA
WORKFORCEZTNA · EDR · MFA
SEGMENTATIONEAST / WEST
TRAFFIC VISIBILITY

Conversations before devices.

Observe north-south and east-west flows, protocol distribution, unusual destinations, authentication patterns, and the path each transaction takes through enforcement.

  • NetFlow / DNS / proxy / endpoint correlation
  • Identity-aware conversation context
  • Baseline deviation and anomaly review
ACTIVE CONTROL STREAMRecent enforcement decisions
07 SIGNALS
  1. EDGE-FW-01DENY

    Repeated authentication source isolated

  2. ZTNA-GWALLOW

    Privileged session verified with MFA

  3. WAF-PRODBLOCK

    Injection signature interrupted

  4. SEG-COREALLOW

    Approved application-to-database flow

DEMONSTRATION TELEMETRY · CONCEPTUAL EXECUTIVE VISIBILITY MODEL · NO PRODUCTION NETWORK DATA DISPLAYED
01 MISSION What must succeed
02 RISK What can prevent success
03 SYSTEMS What enables the mission
04 CONTROLS How trust is engineered
EXECUTIVE DECISION FLOW ↓

A NEW MEXICO STORY

From the Rio Grande Valley
to the executive table.

Gavin grew up in Española, where academic discipline, family, community, and the realities of northern New Mexico shaped the way he sees leadership. He learned early that intelligence matters, but the ability to explain, listen, and connect matters just as much.

At the University of New Mexico in Albuquerque, technology became more than machines and networks. It became a way to solve problems, strengthen institutions, protect people, and create opportunity without leaving home behind.

Northern New Mexico roots UNM undergraduate education Statewide public service Human-centered leadership

GAVIN LUJAN REPORT · UPDATED 16 SEP 2026 · 06:00 MDT

AI + HPC Current State

Confirmed benchmark clusters, reported capacity, speculative infrastructure and the current model field—kept separate so planning does not turn rumor into architecture.

01

TOP500 CONFIRMED

LineShine leads at 2.198 HPL EFlop/s, followed by El Capitan, Frontier, Aurora and JUPITER.

02

REPORTED CAPACITY

UAE resilience redesign and Enflame financing are tracked as planning and supply-chain signals—not commissioned or TOP500-verified capacity.

03

AI + CYBER OPERATIONS

Spain’s regulator-disclosed AI-agent breach investigation sharpens the need for bounded authority, human approval and complete tool-call evidence.

04

MODEL SIGNAL

GPT‑5.6 Sol and Claude Opus 5 primary sources rechecked. Reported previews and provider changes remain separately labeled; no new release is inferred.

Open the AI + HPC dashboard Read the threat brief

THE ROAD THROUGH NEW MEXICO

A career that traveled widely
without losing its center.

Gavin's work has remained anchored in New Mexico, even when the mission carried him across the country. Each chapter added a different lens: operations, enterprise systems, government, education, cybersecurity, and executive leadership.

01
ESPAÑOLA

The beginning

An honor student shaped by northern New Mexico, community expectations, and the determination to build a meaningful life close to home.

02
ALBUQUERQUE

The University of New Mexico

Undergraduate education at UNM opened the door to technology, systems thinking, and the broader possibilities of a career built from New Mexico outward.

03
FARMINGTON + THE UNITED STATES

The field expands

Professional work in Farmington became a launch point for assignments across the United States, building practical fluency in people, operations, and enterprise technology.

04
PUBLIC · PRIVATE · GOVERNMENT · EDUCATION

Every sector speaks a different language

Work across private industry, public institutions, government, and higher education became a strategic advantage: the ability to translate between missions, cultures, and technical realities.

05
NEW MEXICO PUBLIC SERVICE

Technology with consequence

Government service brought mission, stewardship, cybersecurity, modernization, and public trust into one arena. The systems matter because New Mexicans depend on them.

NIST RISK MANAGEMENT FRAMEWORK

Security is not a product.
It is a life cycle.

The RMF turns risk into a disciplined executive process, connecting mission context, system impact, controls, evidence, authorization, and continuous monitoring.

RMF SP 800-37
  1. 01 PREPARE Set context and priorities
  2. 02 CATEGORIZE Determine system impact
  3. 03 SELECT Choose risk-based controls
  4. 04 IMPLEMENT Deploy and document
  5. 05 ASSESS Test control effectiveness
  6. 06 AUTHORIZE Make the risk decision
  7. 07 MONITOR Maintain continuous awareness

EXECUTIVE CAPABILITY MATRIX

Leadership built across sectors.

The career story is not a collection of titles. It is a working system for connecting people, risk, technology, and public purpose.

01

CISO Leadership

Cyber risk translated into executive decisions: NIST CSF/RMF, Zero Trust, identity, resilience, policy, evidence, awareness, continuity and measurable accountability.

02

Research CIO Depth

Linux, mission-critical clusters, high-speed networking, enterprise infrastructure, virtualization, cloud, storage, operations and technical strategy.

03

People + Agile Delivery

Scrum/Agile discovery, coaching, transparent priorities, user stories, iterative delivery, employee development, listening and plainspoken executive communication.

04

Responsible AI

Welcome AI as a transformative capability — with human accountability, bounded authority, secure data handling, auditability and clear mission outcomes.

NIST CYBERSECURITY FRAMEWORK 2.0

Govern the whole system.
Strengthen every function.

CSF 2.0 provides the enterprise vocabulary. Governance sets direction; the five operational functions turn that direction into repeatable resilience.

GV GOVERN Context · Strategy · Roles · Policy · Oversight · Supply Chain
ID IDENTIFY Understand assets, environment, and risk
PR PROTECT Apply safeguards that reduce exposure
DE DETECT Find and analyze adverse events
RS RESPOND Contain, communicate, and act
RC RECOVER Restore capability and improve

LATEST WRITING · GOVERNANCE IN PRACTICE

Ideas for building
what must endure.

The newest essays connect strategic patience, governed AI, philosophy, cybersecurity, public service, and the human responsibility behind every consequential system.

THE LUJAN METHOD

Listen.
Clarify.
Align.
Deliver.

01 · UNDERSTAND THE PEOPLE

Technology only works when the human system around it is understood.

02 · SPEAK PLAINLY

Translate complexity without flattening the truth or hiding the tradeoffs.

03 · BUILD TRUST

Create shared language, visible decisions, realistic commitments, and reliable follow-through.

04 · STEWARD TIME + ATTENTION

Time is finite. Protect focus, prioritize the mission, delegate with trust, and use automation responsibly so human judgment goes where it matters most.

05 · LEAVE NEW MEXICO STRONGER

Modernize institutions, transfer knowledge, develop people, and protect the mission for the long haul.

“Everything comes down to two things: risk and trust. It is all simple math from there.”

BEGIN HERE

Bring the hard problem.

Modernization, cybersecurity, responsible AI, enterprise architecture, executive workshops, public-sector strategy, or a conversation about what New Mexico can build next.

GAVIN LUJAN · THE CYBER RONIN

The ZIAWOLF Way

Mission before machinery. People before platforms. Govern power before scaling it.

Executive doctrine for research computing, cybersecurity, sovereign AI and public-purpose modernization.

01

SEE THE WHOLE FIELD

Map mission, people, data, infrastructure, funding and consequence before acting.

02

MOVE WITHOUT WASTE

Use Aikido: redirect complexity into architecture, evidence and calm execution.

03

BUILD WHAT ENDURES

Create resilient systems that remain trustworthy after the leader leaves the room.

Preserved · 09/11/26