The Santa Fe Group Appoints David J. Perez as CEO

Feb 6, 2020 | News

Featured article by Peter R. Kelley, Kelley Group Two

 CatDavid Perez_CEO_The Santa Fe Group

 Catherine A. Allen, Founder and Chairman, & David J. Perez, Chief Executive Officer, The Santa Fe Group

Catherine A. Allen, Founder and Chairman of The Santa Fe Group, managing agent of The Shared Assessments Program, announced the appointment of David J. Perez as Chief Executive Officer. Allen, who founded The Santa Fe Group in 1996, will continue serving as Chairman of the Board.

The member-driven Shared Assessments Program is widely considered by risk professionals, consultancies and such major organizations as Campbell’s, Ameritrade and CVS to be the authoritative source for third party risk management best practices, tools and research.

Third Party Risk Management (TPRM) is among the fastest growing segments of the cybersecurity market sector, projected to grow from $3.2 billion in 2019 to $6.8 billion by 2024 at a CAGR of 15.9 percent.1 The Santa Fe Group is aggressively growing the Shared Assessments program through international expansion, educational and certification programs, tool innovation and thought leadership to address strong demand in the global TPRM segment. The need to comply with various governance standards and adherence to different TPRM policies and regulations is expected to surge in organizations across all sectors, and drive further penetration of Shared Assessments’ solutions across the globe in virtually every market segment.

Perez, a senior executive and successful entrepreneur, is recognized as a ground-breaking business leader and an accomplished expert in sales, marketing and branding. Perez brings added strength and depth of experience to lead the organization’s expansion and development of innovative tools, best practices, education and research required in today’s dynamic cyber and physical threatscapes.

Perez has successfully started and built technology companies in the fields of healthcare, data analytics, and digital marketing. Prior to founding Seamless Medical Systems, creators of the leading iPad platform for improved patient experience and medical practice efficiency, Perez founded Latin Force, the first Latinx consumer digital marketing agency, partnering with iconic brands such as Nike, Wells Fargo, the NFL and Nickelodeon. While at Latin Force, he led the acquisition of GeoScape International, a data analytics company, in a transaction financed by Goldman Sachs.

“Organizations increasingly understand that third party operational and IT security risks can result in both irreparable reputational damage and millions of dollars in loss and penalties.,” said Chairman Allen. “David’s vision and his deep experience in growing organizations that address complex needs are perfectly aligned to the challenges ahead. He will ensure that the many organizations now relying on Shared Assessments will have the insight, tools, best practices and community resources they need to bring their risk management programs to greater maturity and optimal effectiveness.”

1 MarketsandMarkets, “Third-Party Risk Management Market Worth $6.8 Billion by 2024” December 2019, https://www.prnewswire.com/news-releases/third-party-risk-management-market-worth-6-8-billion-by-2024–exclusive-report-by-marketsandmarkets-300968087.html

 

 

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more
Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

Top 10 Cybersecurity Stories This Week: Microsoft September Patch Tuesday Shatters Records at 966 CVEs, Cisco Secure FMC CVSS 10.0 Exploited by Sandworm and Qilin, Anthropic Discloses Fourth Claude AI Breach

September 11, 2026 | ITBriefcase.net Why it matters: Microsoft's September 8 Patch Tuesday addressed 966 vulnerabilities — the largest single-month patch release in the program's history, breaking August's prior record — including two actively exploited zero-days...

read more