Skip to content
CISO Spotlights

Career profile

Christopher Porter

Global Chief Information Security Officer, Booz Allen Hamilton

Status
Current role, per sources checked 6 July 2026
Appointed
July 2026
Published

Compiled 27 September 2026 from public records. Each statement below is drawn from the sources listed at the end.

Christopher Porter is Global Chief Information Security Officer at Booz Allen Hamilton, the consulting and technology firm, a move SecurityWeek reported in the week of July 6, 2026.

Career path

Porter's RSA Conference expert page, describing his time at Fannie Mae, says he worked to communicate the importance of information security across the enterprise and to strengthen the mortgage financier's defense and response capabilities. The same page puts his overall run in IT and security industries at more than twenty years, with a background spanning economics, network and systems administration, security consulting and research. Before Fannie Mae, according to the same bio, Porter worked at Verizon, where he was lead analyst and an author of its Data Breach Investigations Report series and co-created the VERIS framework for standardizing how organizations record security incidents.

What the record does not show

Neither source reviewed for this profile gives the exact day within the week of July 6 that Porter started at Booz Allen Hamilton, nor do they describe his remit there beyond the global CISO title itself, nor do they say how long he held the Fannie Mae role or when within that tenure he moved from a research-oriented function into the CISO title. What the sourced record does show is a path from data-driven security research and Data Breach Investigations Report authorship at Verizon, into the top security seat at a government-sponsored mortgage financier, and now into a global consulting and technology firm's equivalent post. This profile leaves those undated gaps unstated rather than estimating them.

Sources

  1. 1.
    SecurityWeeksecurityweek.com · published 6 July 2026 · checked 27 September 2026 · tier B
  2. 2.
    RSA Conferencersaconference.com · undated page · checked 27 September 2026 · tier A

Tier A: the organization itself, a regulator or a government page. Tier B: established trade or business press.