David Tobar

Software Engineering Institute

All

Tech Publications

Blog Posts

7 Recommendations to Improve SBOM Quality

August 25, 2025 • Blog Post

By David Tobar , Jessie Jamieson , Mark Priest , Jason Fricke

Software Bill of Materials (SBOM) Harmonization Plugfest 2024

July 17, 2025 • Special Report

By David Tobar , Jessie Jamieson , Mark Priest , Sasank Vishnubhatla , Jason Fricke

Loss Magnitude Estimation in Support of Business Impact Analysis

December 15, 2020 • Technical Report

By Daniel J. Kambic , Andrew P. Moore , David Tobar , Brett Tucker

Managing the Risks of Ransomware

October 11, 2019 • Blog Post

By David Tobar , Jason Fricke

7 Considerations for Cyber Risk Management

February 9, 2018 • Blog Post

More from David Tobar

Software Bill of Materials (SBOM) Harmonization Plugfest 2024

July 17, 2025 • Special Report

By David Tobar , Jessie Jamieson , Mark Priest , Sasank Vishnubhatla , Jason Fricke

Loss Magnitude Estimation in Support of Business Impact Analysis

December 15, 2020 • Technical Report

By Daniel J. Kambic , Andrew P. Moore , David Tobar , Brett Tucker

Defining a Progress Metric for CERT-RMM Improvement

September 8, 2017 • Technical Note

By Gregory Crabb (United States Postal Service) , Nader Mehravari , David Tobar

The CISO Academy

February 23, 2017 • White Paper

By Pamela D. Curtis , Summer C. Fowler , David Tobar , David Ulicne

Structuring the Chief Information Security Officer Organization

October 6, 2015 • Technical Note

By Julia H. Allen , Gregory Crabb (United States Postal Service) , Pamela D. Curtis , Brendan Fitzpatrick , Nader Mehravari , David Tobar

More from David Tobar

7 Recommendations to Improve SBOM Quality

August 25, 2025 • Blog Post

By David Tobar , Jessie Jamieson , Mark Priest , Jason Fricke

Managing the Risks of Ransomware

October 11, 2019 • Blog Post

By David Tobar , Jason Fricke

7 Considerations for Cyber Risk Management

February 9, 2018 • Blog Post

More from David Tobar

Send a Message