About Contribute GitHub
Menu

Steve Riley

Riley has been an influential communicator of how security controls, risk decisions, and organizational culture interact in large technology environments.

Security strategy

Steve Riley is a security strategist and author whose public work has addressed how organizations make security decisions at scale. His approach emphasizes that security is not a product purchase alone: it involves architecture, operations, user experience, and risk governance.

Writing

Riley co-authored Security Strategy: From Requirements to Reality, a Microsoft Press book that presents security planning as a process of translating business and technical requirements into defensible controls.

Public communication

Through talks and writing, Riley has helped make enterprise-security concepts accessible to technical and non-technical audiences. His work belongs to the practitioner tradition of turning security principles into organizational habits.

Timeline

  • 2002Begins a prominent period of public security communication at Microsoft.
  • 2007Co-authors <em>Security Strategy: From Requirements to Reality</em>.
  • 2010sContinues work and speaking on enterprise security and risk management.
Steve Riley
Type
Person
Era
1990s-Present
Known for
Microsoft security strategy; Co-author of <em>Security Strategy</em>; Enterprise security communication
Tags
security-strategy, microsoft, enterprise-security, author, risk-management
Created by Joas A Santos · Something wrong or want it removed? Open an issue.