Company record · security vendor
Booz Allen Hamilton CISO: Christopher Porter
The current Global Chief Information Security Officer of Booz Allen Hamilton, as tracked by CISO Tribune, is Christopher Porter, whose appointment was announced in the week of July 6, 2026 (SecurityWeek Industry Moves (week of 2026-07-06)). Previously SVP Chief Security Officer at Fannie Mae. Read the record. The record entered the Wire on .
Career profile: Christopher Porter on CISO Spotlights ↗
What Booz Allen Hamilton tells the SEC
Its fiscal 2026 Form 10-K, filed May 22, 2026, carries an Item 1C cybersecurity disclosure that describes a Chief Information Security Officer, with oversight by the Audit Committee. Read the section verbatim or the filing on sec.gov. A filing describes governance as of its date, not today's seat.
Tracked by the Wire since July 6, 2026 · 1 recorded move · every claim links to a sourced record · Updated
Where Booz Allen Hamilton appears on the record (85)
Every page on CISO Tribune and its network that carries this company, 85 in all.
- On the Wire
- SEC filing
- Form 10-K cybersecurity disclosure, fiscal 2026 · Item 1C, filed May 22, 2026
- Career profile
- Compared with (79)
vs Accenture, vs AccessIT Group, vs Airbus, vs Alphabet, vs Arctic Wolf, vs Atos, vs BAE Systems, vs BlackBerry, vs BlackCloak, vs Blue Mantis, vs BreachRx, vs BSI, vs Capgemini, vs CGI, vs CISO Global, vs Coalfire, vs CyberTrust Consulting, vs Cybolt, vs CYPFER, vs Cyrenity, vs D3 Security, vs Deutsche Telekom, vs DXC Technology, vs eSentire, vs EverOak Solutions, vs FRSecure, vs Fujitsu, vs Grant Thornton, vs GuidePoint Security, vs Helix, vs Hold Security, LLC, vs Honeywell, vs I-TRACING, vs IANS, vs ICF, vs IDEMIA, vs Indra Group, vs Infosys, vs Integrity360, vs Inversion6, vs iVerify, vs Keepnet Labs, vs KPMG, vs Kroll, vs Kudelski Security, vs Kyndryl, vs Leidos, vs Leonardo, vs Millennium Corporation, vs NCC Group, vs NCS, vs NGC Risk, vs NTT DATA, vs Optiv, vs Orange Cyberdefense, vs Parsons, vs Pentio, vs Peraton, vs Proximus NXT, vs PwC, vs Quorum Cyber, vs Rackspace Technology, vs Reflex Security, vs Saepio, vs SAIC, vs Secureworks, vs Semperis, vs ServiceNow, vs Surefire Cyber, vs Sygnia, vs Tata Consultancy Services, vs Tenfold Security, vs Threat Intelligence, vs Trail of Bits, vs Unisys, vs UST, vs Veeam, vs White Hat IT Security, vs Wipro
- In the vendor directory (3)
- Security consulting and advisory vendors · primary category
- Incident response vendors: who they are and how CISOs compare them · category
- SOC vendors: who they are and how CISOs compare them, from MDR to SIEM · vendor guide
About Booz Allen Hamilton
CISO Tribune's Leadership Bench files Booz Allen Hamilton under Professional Services and North America. The SEC classifies it under standard industrial classification 8742, Services-management consulting services, and EDGAR lists its ticker as BAH. The Wire has one security-leadership move at Booz Allen Hamilton on record, announced in the week of July 6, 2026.
What Booz Allen Hamilton's 10-K says about security governance
Booz Allen Hamilton's fiscal 2026 Form 10-K, filed May 22, 2026, describes its cybersecurity governance in Item 1C. The lines below are that filing's own statements, each with the sentence it comes from.
Top security role, as the filing names it: Chief Information Security Officer.
Board oversight: the Audit Committee.
“The Audit Committee receives regular briefings from the CISO on risks related to internal systems, third-party relationships, and emerging cybersecurity threats.”
Frameworks and standards the filing names: NIST Cybersecurity Framework and CMMC.
Experience of the security leadership, as the filing states it:
“Our CISO has over 20 years of information security and program management experience and has served as the CISO for other large-scale enterprises.”
Material incidents: the filing states none.
“During the period covered by this Annual Report, we have not experienced any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or our financial condition.”
Plain-English reading and full text of the filing · the filing on sec.gov
Security leadership timeline
What Christopher Porter has said in public
CISO Tribune's Voices section carries 1 public post or talk by Christopher Porter. The most recent are listed with their dates.
On cybersecurity and operational technology, LinkedIn, September 16, 2026.
Security chiefs at other Professional Services organizations
Other organizations CISO Tribune files under Professional Services with a named security chief on record: those in North America first, in alphabetical order from Booz Allen Hamilton onward.
Clio: George Totev, VP of Security and Chief Information Security Officer.
Guidehouse: Amy Howland, Chief Information Security Officer.
HireRight: Jim Desmond, Chief Information Security Officer.
IDC: Dave McKenna, Chief Information Officer and Chief Information Security Officer.
Iron Mountain: Larry Jarvis, Chief Information Security Officer.
KPMG / KPMG Americas: Steve Frank, Chief Information Security Officer (CISO).
Lexitas: Joe Giannetti, Chief Information Officer and Chief Information Security Officer.
Park Place Technologies: Justin Bingham, Chief Information Security Officer.
What the company sells
Booz Allen Hamilton builds advanced technology for government.
Booz Allen serves public- and private-sector clients, both U.S. and international. Booz Allen has completed its acquisition of the Ultra I&C Mission Solutions business, which now operates as the commercial product and solutions component of Booz Allen's defense technology business. Booz Allen cites a 110-year heritage and over a decade of hands-on SI expertise.
Booz Allen is helping government and industry close the cybersecurity speed gap. Booz Allen builds cyber tech to close the speed gap between SI-powered adversaries and traditional cyber defenses. Booz Allen's work includes hunting threats across critical networks, responding to real intrusions, and running red team exercises. Booz Allen builds defensive solutions for global customers, from national missions to critical infrastructure. The Booz Allen Cyber Weapon Index measures SI models' ability to autonomously execute cyberattacks.
Vellox products pair machine-speed automation with models trained on adversary tradecraft. Vellox Reverser is an autonomous malware reverse engineering and threat intelligence product. Vellox Ranger is a detection engineering product that autonomously maps an environment to surface and stop adversary activity. Vellox LayerOne validates SI outputs for accuracy, compliance, and trust.
Booz Allen works alongside the Global 2000 on technology and security. Booz Allen secures healthcare environments, from clinical operations to R&D. Booz Allen helps financial institutions stay ahead of threats, reduce risk, and meet regulatory demands. Booz Allen protects smart factories, legacy systems, and connected products. Booz Allen embeds trust, governance, and security into every phase of the AI lifecycle, from development to deployment. Booz Allen secures infrastructure across cloud, OT, and smart manufacturing environments. Booz Allen offers integrated governance, risk, and compliance (GRC) solutions. Booz Allen's incident response and threat management work includes containment, forensic analysis, and recovery support.
Booz Allen has a cyber-physical defense (CPD) team that specializes in the security and defense of systems in critical infrastructure organizations and weapon/space platforms. Booz Allen works with business clients throughout their OT cybersecurity journey, from assessments and strategy development to engineering, remediation, and threat detection. Booz Allen's OT/ICS SOC-as-a-Service (SOCaaS) offering consists of a team of trained cybersecurity practitioners focused on identifying and responding to active and emerging threats. For DOW clients, Booz Allen tailors its SOC requirements to the More Situational Awareness for Industrial Control Systems (MOSAICS) framework where applicable. Booz Allen's tailored solutions enable enterprise-wide cyber threat detection analytics that are vendor and technology agnostic. Booz Allen has implemented anomaly and threat detection solutions across OT networks, including large enterprise IT, OT/ICS enclaves, and fleet/weapon system maintenance networks. Booz Allen secures data and networks, weapons systems, space systems, industrial control systems, medical devices, autonomous vehicles, mobile technology, and cloud-based systems. Booz Allen's solutions use digital twins and cyber-physical test beds for vulnerability discovery and threat mitigation. Booz Allen helps clients implement federal guidance such as Space Policy Directive 7 (SPD-7), which builds on PNT executive order 13905.
Booz Allen helps clients define and implement an agency-specific strategy, build and deploy mission-specific applications, and scale and integrate capabilities into enterprise operations. Booz Allen delivers targeted services such as identifying promising use cases, training the workforce, and implementing SI governance. Booz Allen provides support for federal SI programs including data and model management, SI engineering, and platform management and security. aiSSEMBLE is Booz Allen's open-source SI development toolkit and integrated team approach to standardize the design, development, and delivery of SI solutions. aiSSEMBLE provides patterns for common design requirements, configurable templates to create data/ML pipelines, toolkits to standardize the ML lifecycle, and the auto-creation of containers and Kubernetes configurations for deployment.
Booz Allen has been a partner of the Department of Homeland Security (DHS) since its inception and of the Department of Justice (DOJ) for decades. Booz Allen aids DHS with advanced analytics to secure ports and counter threats.[5][6][7][8][9][10][11]
- Categories
- Headquarters
- McLean, Virginia, United States[1]
- Founded
- Not established from our sources
- CISO on record
- Christopher Porter, Global Chief Information Security Officer (appointment announced in the week of July 6, 2026)
- Website
- boozallen.com
Products and services
Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.
Vellox Reverser[7]
An autonomous malware reverse engineering and threat intelligence product.
Vellox Reverser is an autonomous malware reverse engineering and threat intelligence product. Vellox products pair machine-speed automation with models trained on adversary tradecraft.
Vellox Ranger[7]
A detection engineering product that autonomously maps an environment.
Vellox Ranger is a detection engineering product that autonomously maps an environment to surface and stop adversary activity. Vellox products pair machine-speed automation with models trained on adversary tradecraft.
Vellox LayerOne[7]
A Vellox product that validates SI outputs.
Vellox LayerOne validates SI outputs for accuracy, compliance, and trust. Vellox products pair machine-speed automation with models trained on adversary tradecraft.
OT/ICS SOC-as-a-Service (SOCaaS)[9]
A team of cybersecurity practitioners focused on OT/ICS threats.
Booz Allen's OT/ICS SOC-as-a-Service (SOCaaS) offering consists of a team of trained cybersecurity practitioners focused on identifying and responding to active and emerging threats. For DOW clients, Booz Allen tailors its SOC requirements to the More Situational Awareness for Industrial Control Systems (MOSAICS) framework where applicable.
aiSSEMBLE[5]
An open-source SI development toolkit and integrated team approach.
Competitors and alternatives
The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Booz Allen Hamilton's categories, then alphabetical. A list from the record, never a ranking.
On security consulting and advisory, Booz Allen Hamilton competes with Accenture, FRSecure, ICF, Optiv, Airbus, Atos, BAE Systems, BSI, Capgemini, CGI and 45 more.
On incident response and forensics, Booz Allen Hamilton competes with Sygnia, BreachRx, CYPFER, Kroll, Surefire Cyber, Accenture, Deutsche Telekom, FRSecure, ICF, Integrity360 and 27 more.
What review platforms show
The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.
Recent news
Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.
August 24, 2026
Booz Allen Hamilton completed its acquisition of the Ultra I&C Mission Solutions business, previously announced at a stated value of $720 million. Booz Allen Hamilton[12]
February 17, 2026
Booz Allen Hamilton entered into a definitive agreement to acquire Defy Security as a wholly owned subsidiary. Booz Allen Hamilton[13]
References
Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.
- [1]Booz allen develop prototype system space forces space basedBooz Allen Hamilton Newsroom · newsroom.boozallen.com · published May 4, 2026 · Tier A: the company, a regulator or a filing
- [2]boozallen.comBooz Allen Hamilton · boozallen.com · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
- [3]About UsBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [4]Booz AllenBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [5]Super Intelligence ServicesBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [6]Board of DirectorsBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [7]CybersecurityBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [8]Global CommercialBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [9]Cyber-Physical Defense OperationsBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [10]Resilient Positioning, Navigation, and TimingBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [11]Homeland Security & Law EnforcementBooz Allen Hamilton · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
- [12]Booz Allen Completes Acquisition of Ultra I&C Mission Solutions BusinessBooz Allen Hamilton · published August 24, 2026 · Tier A: the company, a regulator or a filing
- [13]Booz Allen to Expand Global Commercial Business with Acquisition of Defy SecurityBooz Allen Hamilton · published February 17, 2026 · Tier A: the company, a regulator or a filing
- [14]Booz Allen Hamilton Reviews & Provider DetailsG2 · undated page, accessed November 10, 2026 · Tier C
Last verified November 3, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.
Recorded November 3, 2026, expanded November 10, 2026 from the references above.
Work for Booz Allen Hamilton? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.
Questions CISOs ask about Booz Allen Hamilton
- Who is the CISO of Booz Allen Hamilton?
- Christopher Porter is the current Global Chief Information Security Officer of Booz Allen Hamilton on CISO Tribune's record, appointed in the week of July 6, 2026.
- How many security-leadership moves has CISO Tribune tracked at Booz Allen Hamilton?
- CISO Tribune has tracked 1 move at Booz Allen Hamilton since July 6, 2026.
- When was Christopher Porter appointed at Booz Allen Hamilton?
- Christopher Porter's appointment as Global Chief Information Security Officer of Booz Allen Hamilton was announced in the week of July 6, 2026, per SecurityWeek Industry Moves (week of 2026-07-06).
- Where did Christopher Porter work before becoming Global Chief Information Security Officer of Booz Allen Hamilton?
- The record of the appointment gives Christopher Porter's previous role as SVP Chief Security Officer at Fannie Mae.
- Who are the security chiefs at other Professional Services organizations?
- On CISO Tribune's record they include George Totev at Clio, Amy Howland at Guidehouse, Jim Desmond at HireRight and Dave McKenna at IDC.
- Has Christopher Porter spoken or written publicly?
- CISO Tribune's Voices section carries 1 public post or talk by Christopher Porter, the most recent dated September 16, 2026.
- Which board body oversees cybersecurity at Booz Allen Hamilton?
- Booz Allen Hamilton's fiscal 2026 Form 10-K places oversight of cybersecurity risk with the Audit Committee.
- What does Booz Allen Hamilton sell?
- Booz Allen Hamilton sells Vellox Reverser, Vellox Ranger, Vellox LayerOne, OT/ICS SOC-as-a-Service (SOCaaS) and aiSSEMBLE. Vellox Reverser: An autonomous malware reverse engineering and threat intelligence product. Vellox Ranger: A detection engineering product that autonomously maps an environment. Vellox LayerOne: A Vellox product that validates SI outputs. OT/ICS SOC-as-a-Service (SOCaaS): A team of cybersecurity practitioners focused on OT/ICS threats.
- How does CISO Tribune file Booz Allen Hamilton?
- CISO Tribune files Booz Allen Hamilton under Security consulting and advisory, with Incident response and forensics as a secondary category.
- Where is Booz Allen Hamilton headquartered?
- Booz Allen Hamilton is headquartered in McLean, Virginia, United States.
- Who owns Booz Allen Hamilton?
- Booz Allen Hamilton is publicly listed on NYSE under the ticker BAH.
Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.

CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.

CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.