Skip to content
CISO Spotlights

Board cybersecurity-expertise record

Pegasystems: three directors named with cybersecurity expertise

Pegasystems' 2026 proxy names directors Rohit Ghai (CEO of Barracuda Networks), Christopher Lafond and Sharon Rowlands with cybersecurity expertise.

Company
Pegasystems Inc. (PEGA)
Directors named
Rohit Ghai, Christopher Lafond, Sharon Rowlands
Filing
DEF 14A
Filed
24 April 2026

By the CISO Spotlights Desk · Published

Pegasystems' proxy statement for its 2026 annual meeting, filed April 24, 2026, names three director nominees with cybersecurity expertise: Rohit Ghai, Christopher Lafond and Sharon Rowlands.

Ghai, a director since January 2025, "combines deep cybersecurity expertise with executive-level leadership in AI-driven enterprise transformation," per the filing. He is CEO and a board member of Barracuda Networks since September 2025, and was previously CEO of RSA from December 2016 to September 2025, after product and engineering leadership roles at Dell/EMC and Symantec.

Lafond, a director since April 2019, has "cybersecurity experience centered on executive oversight of secure content collaboration, data protection" and enterprise risk governance, per the filing. He was CEO of Insurity, Inc. from 2019 to 2025 after serving as its CFO, and earlier was EVP and CFO of Intralinks.

Rowlands, a director since April 2016, has "executive and board-level expertise in cybersecurity," per the filing. She has been CEO of Newfold Digital (formerly Web.com) since 2019, and previously held CEO roles at ReachLocal, Penton Media, Altegrity and Thomson Financial.

No SEC rule requires naming a director's cybersecurity background this way: a 2022 proposal to add Item 407(j) of Regulation S-K was dropped from the SEC's final 2023 cybersecurity-disclosure rule. Pegasystems' proxy does it anyway, voluntarily, for all three. See the board cybersecurity-expertise record for other companies making the same choice, with no comparison or ranking implied.

Sources

  1. 1.
    Pegasystems Inc., Schedule 14A (SEC EDGAR)sec.gov · published 24 April 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.

See an error? Request a correction.