Uploaded August 2026 | Updated September 2026, 2 hours ago
Tom Millar (CISA, US)
Since the dawn of FIRST, most cyber adversaries have been engaged in cyber espionage rather than targeted disruption. Over the last several years, this paradigm has shifted; while many bad actors still seek to steal secrets, many others are positioned to act destructively, including against targets with direct effects on life and safety.
This presentation will explain how the modern threat landscape requires novel thinking from defenders and incident responders, explaining in detail the limitations of the “risk management” mindset, and exploring what lessons we can learn from the field of war.
---
Tom Millar has served in CISA since 2009, working to strengthen the nation’s cyber defenses and resilience against emerging threats. His work has included increasing the level of public, private and international partner engagement, and supporting initiatives to improve information sharing, such as the standardization of the Traffic Light Protocol. As the Branch Chief of Cyber Resilience within the Cyber Security Division, he oversees CISA’s architectural cybersecurity assessments, the Cybersecurity Performance Goals program, and training and standards for assessment performance. Prior to his cybersecurity career, he served as a linguist with the 22nd Intelligence Squadron of the United States Air Force. Mr. Millar holds a Master’s of Science from the George Washington University and is a Distinguished Graduate of the National Defense University’s College of Information and Cyberspace.
Tom Millar (CISA, US)
Since the dawn of FIRST, most cyber adversaries have been engaged in cyber espionage rather than targeted disruption. Over the last several years, this paradigm has shifted; while many bad actors still seek to steal secrets, many others are positioned to act destructively, including against targets with direct effects on life and safety.
This presentation will explain how the modern threat landscape requires novel thinking from defenders and incident responders, explaining in detail the limitations of the “risk management” mindset, and exploring what lessons we can learn from the field of war.
---
Tom Millar has served in CISA since 2009, working to strengthen the nation’s cyber defenses and resilience against emerging threats. His work has included increasing the level of public, private and international partner engagement, and supporting initiatives to improve information sharing, such as the standardization of the Traffic Light Protocol. As the Branch Chief of Cyber Resilience within the Cyber Security Division, he oversees CISA’s architectural cybersecurity assessments, the Cybersecurity Performance Goals program, and training and standards for assessment performance. Prior to his cybersecurity career, he served as a linguist with the 22nd Intelligence Squadron of the United States Air Force. Mr. Millar holds a Master’s of Science from the George Washington University and is a Distinguished Graduate of the National Defense University’s College of Information and Cyberspace.
