Author: Eric Edwards, CISSP

Eric Edwards is a risk control consultant for CNA, and supports risk control services provided to firms holding cyber insurance policies. Prior to joining CNA, Eric was a cybersecurity consultant and manager for five years with a large national public accounting and consulting firm. Eric performed and led cybersecurity assessment services for clients to help identify and remediate gaps and deficiencies in cybersecurity controls. He partnered with clients on assessments addressing IT infrastructure security, cyber governance and maturity, as well as network penetration testing. Eric was also responsible for aligning the firms’ assessment methodology with cyber industry best practices and regulatory requirements applicable to clients.

At CNA, Eric serves as a cybersecurity specialist in CNA’s Risk Control unit. He is responsible for providing consultations with organizations of all sizes and industries seeking to mitigate cyber risk. He also provides technical expertise to the underwriting process for cyber risks. Eric graduated from the University of Illinois at Urbana-Champaign with bachelor’s degree in Business Administration. He is a Certified Information Systems Security Professional (CISSP) and a member of the International Association of Privacy Professionals (IAPP).