With gratitude to Mother Earth, Great Spirit, the One — and whatever name we give the greater mystery. Thank you for the time, the work, the people, and the opportunity to serve.
Secure the mission. Outmaneuver the threat. Engineer the future.
00 / 42··15 SEC SIGNAL
Gavin Lujan is a New Mexico CIO, CISSP and CCSP with 25+ years spanning cybersecurity, statewide infrastructure, enterprise modernization, Linux and mission-critical computing, public service, education, and executive leadership. His operating premise is simple: security creates trust, technology must serve people, and responsible AI is now a force multiplier that leaders must govern — and learn to use well.
Risk decisions remain connected to system context, control performance, and meaningful change.
ZERO TRUST · RESOURCE-CENTERED DEFENSE
REQUEST
POLICYverify continuously
RESOURCE
IDENTITYDEVICECONTEXTRISK
Never trust by location alone.
Make access decisions from identity, device, context, policy, telemetry, and least privilege.
NIST AI RMF · HUMAN-ACCOUNTABLE AI
HUMAN AUTHORITY
GOVERNMAPMEASUREMANAGE
Bound autonomy before scaling capability.
Govern data, permissions, models, tools, evidence, failure modes, and human approval.
35.0844° NRISK / TRUST / CONSEQUENCENEW MEXICO, USA
CRITICAL INFRASTRUCTURE: WATER AND WASTEWATER SYSTEMS UNDER ACTIVE PRESSUREAI THREAT SHIFT: FROM ATTACK ASSISTANT TO OPERATIONAL AGENTEXECUTIVE PRIORITY: INTERNET-EXPOSED OT · IDENTITY · MANUAL RECOVERYDEFENSE: GOVERN · IDENTIFY · PROTECT · DETECT · RESPOND · RECOVERCRITICAL INFRASTRUCTURE: WATER AND WASTEWATER SYSTEMS UNDER ACTIVE PRESSUREAI THREAT SHIFT: FROM ATTACK ASSISTANT TO OPERATIONAL AGENTEXECUTIVE PRIORITY: INTERNET-EXPOSED OT · IDENTITY · MANUAL RECOVERYDEFENSE: GOVERN · IDENTIFY · PROTECT · DETECT · RESPOND · RECOVER
ROOTSESPAÑOLA, NEW MEXICO
SECURITYCISSP · CCSP · GRC STUDY
EXPERIENCE25+ YEARS · CIO · HPC/LINUX
OPERATING MODELGOVERN · ENABLE · DELIVER
8 · 8 · 2026 EXECUTIVE POSITIONING
Security leadership. Research-scale technology.
Two complementary lanes built from the same career: protect complex public institutions, and create reliable technology environments where people can do consequential work.
STATEWIDE CISO READINESS
Cybersecurity as public trust.
Executive governance across NIST CSF, RMF and 800-53; Zero Trust; identity; resilience; PCI; risk evidence; incident readiness; policy; cloud security; and clear communication with leaders, technologists and the public.
CISSP + CCSP with continuing governance, risk and compliance study
Security leadership embedded across multiple CIO and infrastructure roles
Human-centered leadership that develops staff and makes accountability visible
Responsible AI governance: embrace capability while bounding data, permissions, evidence and human authority
RESEARCH CIO READINESS
Strategy with hands-on roots.
Leadership grounded in Linux, mission-critical computing clusters, high-speed interconnects, enterprise networking, virtualization, cloud, storage, continuity, multi-site operations and service management.
Hewlett-Packard mission-critical Linux / clustered-computing experience
Statewide network and infrastructure leadership
Budget, vendor, procurement, portfolio and modernization governance
Disciplined prioritization across simultaneous mission demands
TIME IS THE NONRENEWABLE ASSET.
Prioritize deliberately. Protect focus. Empower capable people. Use automation and AI responsibly. Reserve human attention for judgment, relationships and the decisions that matter.
GV-01 / 400organizational context: define the mission outcomeNIST CSF · NEXT SIGNAL 10 SEC
CURRENT AI / CYBERSECURITY EVENTS & INCIDENTS
The signal beyond the dashboard.
A concise executive feed focused on operational consequence, not panic. Incidents are curated from public reporting and primary advisories, with attribution uncertainty stated plainly.
GLOBAL CYBER INTELLIGENCE · ACTIVE
READY · CISA KEV + NIST NVD · SELECT UPDATE
ACTIVE PANE / TOP 10
Current exploited-threat queue
Ranked for executive awareness. Validate exposure and business relevance before action.
EDITORIAL INTELLIGENCE / CONTEXT
HIGH · CRITICAL INFRASTRUCTUREJUL 30–31, 2026
Water systems targeted across multiple states
Federal investigators are examining attacks affecting water and wastewater operators in at least seven states. More than 30 Minnesota community systems were reportedly targeted, with some operational disruption, password changes, pressure loss, or manual recovery activity.
Sector: Water / OTStatus: Investigation ongoingImpact: Operations disruptedAttribution: Not final
Recent threat research describes AI performing hands-on work within live intrusions, accelerating malware development, reconnaissance, exploitation, and operational decision-making. The governance question is no longer whether attackers use AI, but where autonomy changes the risk curve.
Vector: Agentic operationsRisk: Speed and scaleControl: Human authorizationNeed: Behavior monitoring
Real-world AI cyber activity mapped to MITRE ATT&CK
Anthropic researchers mapped observed AI-enabled cyber operations to ATT&CK techniques, highlighting how models can lower barriers, compress timelines, and broaden tactical reach even when the actor is not highly sophisticated.
The Government Accountability Office emphasized that connected operational technology, constrained staffing, and uneven cybersecurity maturity leave water and wastewater systems exposed to threat actors capable of causing service and public-health consequences.
Source: U.S. GAOScope: NationalExposure: Connected OTPriority: Sector strategy
01 · REDUCE EXPOSURERemove unnecessary internet access to operational technology.02 · CONTROL IDENTITYReplace defaults, require MFA, and separate privileged access.03 · PRESERVE MANUAL CONTROLPractice safe fallback operations before an incident.04 · GOVERN AI AGENTSBound tools, permissions, data, logging, and human approval.
Editorial note: Reporting on the water incidents is evolving. Federal agencies had not issued a final public attribution at the time of this update. The feed presents operationally relevant facts and labels unresolved claims rather than turning uncertainty into theater.
RANGER-INSPIRED · SOC / NOC COMMAND VISIBILITY
See the traffic. Control the consequence.
A unified executive view of network conversations, enforcement points, control health, and operational risk. Designed to make technical signals legible at the leadership table.
COLLECTORS UPDATED · JUST NOW
GL / SECURITY OPERATIONSACTIVE CONVERSATION PLANE
FLOW RATE724 Mb/sNORTH / SOUTH + EAST / WESTOBSERVED ASSETS148142 HEALTHY · 6 REVIEWCONTROL HEALTH98.6%NIST CSF / RMF EVIDENCEOPEN SIGNALS071 HIGH · 2 MEDIUM · 4 WATCH
ENFORCEMENT TOPOLOGYTrust zones and control points
LIVE SIM
INTERNET UNTRUSTED
EDGE FWIPS · WAF · GEO
SECURITY CORESIEM · NDR · IAM
APPLICATIONSAPI · WEB · DATA
WORKFORCEZTNA · EDR · MFA
SEGMENTATIONEAST / WEST
TRAFFIC VISIBILITY
Conversations before devices.
Observe north-south and east-west flows, protocol distribution, unusual destinations, authentication patterns, and the path each transaction takes through enforcement.
NetFlow / DNS / proxy / endpoint correlation
Identity-aware conversation context
Baseline deviation and anomaly review
CONTROL ASSURANCE
Evidence, not decoration.
Map operational telemetry to the controls leaders are accountable for—from identity and segmentation to recovery, monitoring, and supplier risk.
NIST CSF 2.0 and RMF traceability
Control ownership and evidence freshness
Exceptions, compensating controls, and risk acceptance
FIREWALL POSTURE
Every boundary has an owner.
Make perimeter, application, cloud, and internal segmentation policy visible as one governed system.
Edge firewall · IPS · geo and reputation controls
WAF and API enforcement
Internal segmentation and Zero Trust access
ACTIVE CONTROL STREAMRecent enforcement decisions
07 SIGNALS
EDGE-FW-01DENY
Repeated authentication source isolated
ZTNA-GWALLOW
Privileged session verified with MFA
WAF-PRODBLOCK
Injection signature interrupted
SEG-COREALLOW
Approved application-to-database flow
DEMONSTRATION TELEMETRY · CONCEPTUAL EXECUTIVE VISIBILITY MODEL · NO PRODUCTION NETWORK DATA DISPLAYED
01MISSION
What must succeed
02RISK
What can prevent success
03SYSTEMS
What enables the mission
04CONTROLS
How trust is engineered
EXECUTIVE DECISION FLOW ↓
A NEW MEXICO STORY
From the Rio Grande Valley to the executive table.
Gavin grew up in Española, where academic discipline, family, community, and the realities of northern New Mexico shaped the way he sees leadership. He learned early that intelligence matters, but the ability to explain, listen, and connect matters just as much.
At the University of New Mexico in Albuquerque, technology became more than machines and networks. It became a way to solve problems, strengthen institutions, protect people, and create opportunity without leaving home behind.
Northern New Mexico rootsUNM undergraduate educationStatewide public serviceHuman-centered leadership
THE ROAD THROUGH NEW MEXICO
A career that traveled widely without losing its center.
Gavin's work has remained anchored in New Mexico, even when the mission carried him across the country. Each chapter added a different lens: operations, enterprise systems, government, education, cybersecurity, and executive leadership.
01
ESPAÑOLA
The beginning
An honor student shaped by northern New Mexico, community expectations, and the determination to build a meaningful life close to home.
02
ALBUQUERQUE
The University of New Mexico
Undergraduate education at UNM opened the door to technology, systems thinking, and the broader possibilities of a career built from New Mexico outward.
03
FARMINGTON + THE UNITED STATES
The field expands
Professional work in Farmington became a launch point for assignments across the United States, building practical fluency in people, operations, and enterprise technology.
04
PUBLIC · PRIVATE · GOVERNMENT · EDUCATION
Every sector speaks a different language
Work across private industry, public institutions, government, and higher education became a strategic advantage: the ability to translate between missions, cultures, and technical realities.
05
NEW MEXICO PUBLIC SERVICE
Technology with consequence
Government service brought mission, stewardship, cybersecurity, modernization, and public trust into one arena. The systems matter because New Mexicans depend on them.
NIST RISK MANAGEMENT FRAMEWORK
Security is not a product. It is a life cycle.
The RMF turns risk into a disciplined executive process, connecting mission context, system impact, controls, evidence, authorization, and continuous monitoring.
RMFSP 800-37
01PREPARE
Set context and priorities
02CATEGORIZE
Determine system impact
03SELECT
Choose risk-based controls
04IMPLEMENT
Deploy and document
05ASSESS
Test control effectiveness
06AUTHORIZE
Make the risk decision
07MONITOR
Maintain continuous awareness
EXECUTIVE CAPABILITY MATRIX
Leadership built across sectors.
The career story is not a collection of titles. It is a working system for connecting people, risk, technology, and public purpose.
01
CISO Leadership
Cyber risk translated into executive decisions: NIST CSF/RMF, Zero Trust, identity, resilience, policy, evidence, awareness, continuity and measurable accountability.
Scrum/Agile discovery, coaching, transparent priorities, user stories, iterative delivery, employee development, listening and plainspoken executive communication.
04
Responsible AI
Welcome AI as a transformative capability — with human accountability, bounded authority, secure data handling, auditability and clear mission outcomes.
NIST CYBERSECURITY FRAMEWORK 2.0
Govern the whole system. Strengthen every function.
CSF 2.0 provides the enterprise vocabulary. Governance sets direction; the five operational functions turn that direction into repeatable resilience.
IDIDENTIFY
Understand assets, environment, and risk
PRPROTECT
Apply safeguards that reduce exposure
DEDETECT
Find and analyze adverse events
RSRESPOND
Contain, communicate, and act
RCRECOVER
Restore capability and improve
LATEST WRITING · GOVERNANCE IN PRACTICE
Ideas for building what must endure.
The newest essays connect strategic patience, governed AI, philosophy, cybersecurity, public service, and the human responsibility behind every consequential system.
Technology only works when the human system around it is understood.
02 · SPEAK PLAINLY
Translate complexity without flattening the truth or hiding the tradeoffs.
03 · BUILD TRUST
Create shared language, visible decisions, realistic commitments, and reliable follow-through.
04 · STEWARD TIME + ATTENTION
Time is finite. Protect focus, prioritize the mission, delegate with trust, and use automation responsibly so human judgment goes where it matters most.
05 · LEAVE NEW MEXICO STRONGER
Modernize institutions, transfer knowledge, develop people, and protect the mission for the long haul.
“Everything comes down to two things: risk and trust. It is all simple math from there.”
BEGIN HERE
Bring the hard problem.
Modernization, cybersecurity, responsible AI, enterprise architecture, executive workshops, public-sector strategy, or a conversation about what New Mexico can build next.