Mark T. Weatherford, CISSP, CISM
Executive Officer
California Office of Information Security
and Privacy Protection


Mr. Weatherford has extensive executive and operational experience in the information and cyber security arena with a career that spans both the public and private information security sectors. Appointed by

Governor Schwarzenegger to his present position as Executive Officer of the California Office of Information Security and Privacy, Weatherford has broad authority over the State's information security and privacy activities. In this role, he is responsible for California state government information security and privacy program policy, standards, and procedures and also for coordinating the activities of state agency information security officers to ensure compliance. He also oversees the first-in-the-nation Office of Privacy Protection, which provides information and education for consumers on identity theft and other privacy issues, as well as privacy practice recommendations for business and other organizations.

Mr. Weatherford previously served as the Chief Information Security Officer for the State of Colorado where he was appointed by two successive governors to develop and lead the state information security program.

Mr. Weatherford is a former U.S. Naval Cryptologic Officer. While on active duty in the Navy, he was responsible for leading the U.S. Navy's Computer Network Defense operations and the Naval Computer Incident Response Team. After joining the Raytheon company, his leadership was instrumental in establishing the first Security Operations Center for the Navy/Marine Corps Intranet program, which consolidated all naval network and information assurance operations at three central facilities in the United States.

Mr. Weatherford holds a Bachelor of Science degree in Business Administration from the University of Arizona at Tucson and a Master of Science degree in Information Technology Management from the Naval Postgraduate School in Monterey, California.

Mr. Weatherford is a member of the Executive Committee of the Multi-State Information Sharing and Analysis Center, the Security and Privacy Committee of the National Association of State Chief Information Officers, the Information Systems Security Association, and the Information Systems Audit and Control Association. He also holds Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM) certifications.