Cyber Risk and Resilience Directorate
Matthew Butkovic is the technical director of the Cyber Risk and Resilience Directorate in the CERT Division of the Software Engineering Institute at Carnegie Mellon University (CMU). Butkovic performs critical infrastructure protection research and develops methods, tools, and techniques for evaluating capabilities and managing risk. This includes addressing the challenges of complex supply chains. Butkovic teaches graduate-level cybersecurity policy courses at the CMU Heinz College. He is also an instructor, focused on organizational resilience and supply chain risk management, for the CMU Heinz College CISO and CRO Executive Certificate Programs.
Butkovic has more than 20 years of managerial and technical experience in information technology—particularly information systems security, process design, and audit—in the banking and manufacturing sectors. Prior to joining the CERT Division in 2010, Butkovic was leading information security and business resilience efforts for a Fortune 500 manufacturing organization.
Butkovic is a Certified Information Systems Security Professional (CISSP) and Certified Information Systems Auditor (CISA). He earned degrees at the University of Pittsburgh (BA) and Pennsylvania State University (MS).
The Software Engineering Institute is a federally funded research and development center sponsored by the Department of Defense and operated by Carnegie Mellon University. The SEI’s headquarters are just off the main CMU campus in the Oakland section of Pittsburgh, PA.