Ross A. Leo
Mr. Leo has been in Information System for 35 years, and an Information Security professional for over 30 years. He has worked
internationally as a Systems Analyst/Engineer, and as a Security and Privacy Consultant. His past employers include IBM, St.
Luke's Episcopal Hospital, Computer Sciences Corporation, and Rockwell International. A NASA contractor for 22 years, he was
Director of Security Engineering and Chief Security Architect for Mission Control at the Johnson Space Center. More recently, Mr.
Leo was the Director of Information Systems, and Chief Information Security Officer for the Managed Care Division of the
University of Texas Medical Branch in Galveston, Texas.
Having attained his CISSP status in 1997, Mr. Leo was invited to join ISC2 as Chairman of the Curriculum Development
Committee, and served in this role until 2004. During this time, he formulated and directed the effort that produced what became
the standard curriculum still used to train CISSP candidates worldwide. Since 2004 Mr. Leo has been involved in the development
and evolution of a standardized curriculum in HIPAA Compliance, and continues this vital work today. He has maintained his
currency and skill as a professional educator and has since trained and certified nearly 4200 CISSP candidates since 1998, and
nearly 1000 in HIPAA compliance since 2004. When not providing professional education, he continues his successful Information
Security and Governance and HIPAA/HITECH consulting as a vital part of his professional practice.
Mr. Leo serves as a member of several university advisory boards overseeing curriculum development and programs in the
Information Assurance and Engineering areas; including Texas State Technical College, DeVry University, and Voorhees College.
Mr. Leo recently joined the faculty of San Jacinto College in Houston, Texas as Adjunct Instructor of Professional Education. He
is a charter member on the Advisory Board of the recently formed Cybersecurity Institute at the University of Houston, Clear
Mr. Leo is a Past Member on the Editorial Boards for Auerbach Publishing and Homeland Security Magazine (ACFEI), and the
Senior Advisory Panel for eWeek Publications. Mr. Leo's industry guide, "The HIPAA Program Reference Handbook", was published
in January 2005. His current project is Series Editor for the "Critical Infrastructure Protection and Cybersecurity Engineering
Series" for Auerbach. In 2012 he provided the definitive entry on HIPAA/HITECH for the Encyclopedia of Information Technology.
Mr. Leo is a past member of the IT Security Council for the American Society of Industrial Security (ASIS). He is a member of
(ISC)2, Project Management Institute (PMI), and the American Board of Forensic Engineering and Technology (ABFET) for The
American College of Forensic Examiners International (ACFEI). Mr. Leo holds certifications from each of these organizations.
Mr. Leo attended Graduate School at the University of Houston, and Undergraduate school at Southern Illinois University.
Originally from California, Mr. Leo has lived in Texas since 1980.
Back to Consultants