Company record
AutoNation CISO: Brian Fricke
The current Chief Information Security Officer (CISO) of AutoNation, as tracked by CISO Tribune, is Brian Fricke, whose appointment was announced in the week of April 27, 2026 (SecurityWeek Industry Moves (week of 2026-04-27)). Previously MSVP, CISO, and technology risk executive at City National Bank of Florida. Read the record. The record entered the Wire on .
Career profile: Brian Fricke on CISO Spotlights ↗
What AutoNation tells the SEC
Its fiscal 2025 Form 10-K, filed February 12, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since April 27, 2026 · 1 recorded move · every claim links to a sourced record · Updated
Where AutoNation appears on the record (3)
Every page on CISO Tribune and its network that carries this company, 3 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2025 · Item 1C, filed February 12, 2026
- Career profile
About AutoNation
CISO Tribune's Leadership Bench files AutoNation under Retail & Consumer and North America. The SEC classifies it under standard industrial classification 5500, Retail-auto dealers & gasoline stations, and EDGAR lists its ticker as AN. The Wire has one security-leadership move at AutoNation on record, announced in the week of April 27, 2026.
What AutoNation's 10-K says about security governance
AutoNation's fiscal 2025 Form 10-K, filed February 12, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Top security role, as the filing names it: Chief Information Security Officer.
Board oversight: the Audit Committee.
“The Board's Audit Committee is central to the Board's oversight of cybersecurity risks and bears the primary responsibility for this area.”
How often the board or committee hears about it: quarterly.
“He provides comprehensive briefings to the Audit Committee on a quarterly basis or more frequently as needed.”
Experience of the security leadership, as the filing states it:
“With nearly three decades of experience in the field of cybersecurity, including extensive experience as an enterprise CISO, his in-depth knowledge and experience are instrumental in developing and executing our cybersecurity strategies.”
Material incidents: the filing states none.
“To date, risks from cybersecurity threats have not materially affected us, and we currently do not expect that the risks from cybersecurity threats are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
What Brian Fricke has said in public
CISO Tribune's Voices section carries 2 public posts and talks by Brian Fricke. The most recent are listed with their dates.
On Veterans Day appreciation, LinkedIn, November 11, 2026.
On AI risk in New York City, LinkedIn, October 10, 2026.
Security chiefs at other Retail & Consumer organizations
Other organizations CISO Tribune files under Retail & Consumer with a named security chief on record: those in North America first, in alphabetical order from AutoNation onward.
Coca-Cola: Derek Benz, Senior Vice President and Chief Information Security Officer.
Marriott International: Daniel Dubowski, Senior Vice President and Chief Information Security Officer.
Nike: Adam Zoller, Chief Information Security Officer (CISO).
PENN Entertainment: Gary Hunter, Chief Information Security Officer.
Primo Brands: Ravi Thatavarthy, Chief Information Security Officer.
Ralph Lauren: John Opala, Chief Information Security Officer.
SpartanNash: Brett Hoffman, VP and Chief Information Security Officer.
Target: Rich Agostino, Senior Vice President, Chief Information Security Officer & Infrastructure.
Questions CISOs ask about AutoNation
- Who is the CISO of AutoNation?
- Brian Fricke is the current Chief Information Security Officer (CISO) of AutoNation on CISO Tribune's record, appointed in the week of April 27, 2026.
- How many security-leadership moves has CISO Tribune tracked at AutoNation?
- CISO Tribune has tracked 1 move at AutoNation since April 27, 2026.
- When was Brian Fricke appointed at AutoNation?
- Brian Fricke's appointment as Chief Information Security Officer (CISO) of AutoNation was announced in the week of April 27, 2026, per SecurityWeek Industry Moves (week of 2026-04-27).
- Where did Brian Fricke work before becoming Chief Information Security Officer (CISO) of AutoNation?
- The record of the appointment gives Brian Fricke's previous role as MSVP, CISO, and technology risk executive at City National Bank of Florida.
- Who are the security chiefs at other Retail & Consumer organizations?
- On CISO Tribune's record they include Derek Benz at Coca-Cola, Daniel Dubowski at Marriott International, Adam Zoller at Nike and Gary Hunter at PENN Entertainment.
- Has Brian Fricke spoken or written publicly?
- CISO Tribune's Voices section carries 2 public posts and talks by Brian Fricke, the most recent dated November 11, 2026.
- Which board body oversees cybersecurity at AutoNation?
- AutoNation's fiscal 2025 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.