BAE Systems, Inc. Leadership & Management

What’s a quotable hallmark of good management on your team — and how is it reinforced weekly?

A hallmark of good management on my team is that we run decisions through three filters: put the work where it belongs; codify and document what we do so it is repeatable and teachable; and keep a business-focused perspective in the room.

These guiding principles matter because cyber assurance cannot operate in a vacuum. If assurance is disconnected from the business, it becomes a barrier. We reinforce those principles every week in how we review work, assign ownership, and make processes clearer and more scalable. If something is not documented, it cannot be shared. If ownership is unclear, execution will suffer. And if the business context is missing, we are not solving the right problem.

A simple philosophy guides us: Say what you do, do what you say, and prove it. My team is the “prove it” function.

Which forum or artifact keeps priorities obvious?

The forum that keeps priorities most obvious for us is our team standup with no formal agenda, which occurs twice each week. Since much of the team is remote, that unstructured time creates the equivalent of hallway conversations, and it often surfaces the issues that matter most.

We also have a broader operating rhythm that keeps alignment visible. Each week, our cyber assurance program teams across sectors meet to compare approaches and outcomes, which helps us reinforce repeatable processes and make sure people understand not just what we’re doing, but how we’re doing it.

On top of that, we have an oversight committee made up of senior leaders across cybersecurity, compliance and assurance. That forum reviews deficiencies, discusses response plans, and helps keep priorities clear at the decision-making level.

For me, it’s the combination that works: informal conversations to surface what’s real, and structured reviews to keep everyone aligned on what matters most.

What part of the strategy excites people — and what metric shows progress?

What excites people most is a shift from pure compliance to business outcomes. We’ve moved beyond just telling teams the rules and toward a more productive conversation: What are you trying to accomplish, and how can we help you achieve it within the rules or identify another compliant path forward?

That changes the role of cyber assurance. We aren’t here just to enforce requirements; we’re here to protect the business while helping it move with confidence. When teams see assurance as a partner in solving problems, not just identifying them, engagement increases, decisions improve, and collaboration is stronger.

A key sign of progress is how much more time we now spend beyond traditional cyber channels. We’re engaging more directly with programs and business technology officers, not just assurance teams, to understand goals earlier and help shape practical solutions that support mission delivery and business growth.

To me, that is the right measure: stronger business engagement while still delivering the compliance and assurance outcomes we are accountable for. When we help the business pursue more strategic efforts in the right way, that creates momentum and more opportunities.