Mischel Kwon

{{Short description|American cybersecurity executive and public official}}

{{Use mdy dates|date=May 2025}}

{{Infobox person

| name = Mischel Kwon

| nationality = American

| education = B.S. in Computer Science, University of Maryland Global Campus
M.S. in Computer Science, Marymount University

| occupation = Cybersecurity executive, public official, computer scientist

| years_active = 1980s–present

| known_for = Founding MKACyber; directing US-CERT; building the DOJ JSOC

| employer = MKACyber (founder & CEO); formerly U.S. Department of Justice, DHS

}}

Mischel Kwon is an American computer security expert and former director of the United States Computer Emergency Readiness Team (US-CERT) at the Department of Homeland Security. She is the founder and CEO of MKACyber, a cybersecurity operations company, and previously served as Deputy Chief Information Security Officer (CISO) for the Department of Justice.{{cite web |title=Mischel Kwon |url=https://www.fbcinc.com/e/cyberMDconference/speakerpopup.aspx?id=Q6UJ9A00EPA0 |website=Federal Business Council (FBC) |access-date=2025-06-01}} Kwon is known for her expertise in building and maturing Security Operations Centers (SOCs), threat detection, and incident response.

Career

Kwon began her federal cybersecurity career in the early 2000s at the U.S. Department of Justice (DOJ), where she became Deputy CISO and built the department's first centralized incident response and monitoring facility, the Justice Security Operations Center (JSOC).{{cite web |title=Top Women in Cybersecurity: Mischel Kwon |url=https://cyberscoop.com/top-women-in-cybersecurity-mischel-kwon |website=CyberScoop |date=March 16, 2017 |access-date=May 17, 2025}}

In 2008, she was appointed Director of US-CERT, the federal agency tasked with monitoring and responding to cyber threats. During her tenure, she led efforts to modernize the federal incident response infrastructure and respond to a growing wave of advanced persistent threats (APTs).

In 2010, she founded MKACyber, a cybersecurity consulting firm specializing in managed security operations centers and cyber threat intelligence. The company is recognized for developing the "W@tchtower SOC Methodology" and providing services to Fortune 500 companies and government clients.{{cite news |last=Keller |first=Tom |title=Kwon Resigns as US-CERT Director |url=https://www.govinfosecurity.com/kwon-resigns-as-us-cert-director-a-1689 |work=GovInfoSecurity |date=2010-07-21 |access-date=May 19, 2025}} {{cite web |title=Mischel Kwon - Cybersecurity Professional of the Year |url=https://cybersecurity-excellence-awards.com/candidates/mischel-kwon/ |website=Cybersecurity Excellence Awards |date=November 6, 2017 |access-date=May 17, 2025}}

Policy and legislative impact

During her tenure as Director of US-CERT, Kwon was involved in shaping national discussions on the federal government’s cybersecurity posture. She was often cited in coverage concerning the effectiveness and structure of federal cybersecurity leadership. In a 2009 article, she commented on the challenges the federal government faced amid leadership vacancies in key cybersecurity roles, highlighting the need for cohesive direction and incident response coordination.{{cite web |title=Impact on Cybersecurity Without a Czar |url=https://www.govinfosecurity.com/impact-on-cybersecurity-without-czar-a-1714 |website=GovInfoSecurity |date=August 18, 2009 |access-date=May 30, 2025}}

Kwon has also addressed the implications of executive orders and federal cybersecurity legislation. She has spoken about the importance of improved threat intelligence sharing between the government and private sector, as outlined in various policy proposals. In an interview with BankInfoSecurity, she advocated for using cyber incidents as a catalyst to educate senior leadership and influence federal investment strategies in Cybersecurity infrastructure.{{cite web |title=Using Cyberattacks for C-Suite Buy-In |url=https://www.bankinfosecurity.com/using-cyberattacks-for-c-suite-buy-in-a-5646 |website=BankInfoSecurity |date=August 2, 2013 |access-date=May 30, 2025}}

Her insights have informed both public and private sector approaches to strategic risk management and have been influential in forums such as the RSA Conference and other policy-focused cybersecurity events.

Awards and recognition

In 2017, Kwon was named one of the Top Women in Cybersecurity by CyberScoop for her work in government cybersecurity initiatives.

That same year, she received the Cybersecurity Professional of the Year award from the Cybersecurity Excellence Awards.

In 2018, she was inducted into the CyberCorps Scholarship for Service Hall of Fame, which recognizes contributions to the development of the federal cybersecurity workforce.{{cite web |title=MKACyber CEO Mischel Kwon Named to NSF Hall of Fame |url=https://www.prweb.com/releases/mkacyber_ceo_mischel_kwon_named_to_the_national_science_foundation_s_cybercorps_scholarship_for_service_hall_of_fame/prweb15071297.htm |website=PRWeb |date=July 25, 2018 |access-date=May 19, 2025}}

She is also a recipient of the Federal 100 Award, which highlights individuals for their impact on federal information technology.{{cite web |title=Federal 100 Award Winners |url=https://fcw.com/federal-100/ |website=FCW |access-date=May 19, 2025}}

Board memberships

Kwon serves on the Western Governors University (WGU) Information Technology Program Council, which advises the university on curriculum development to align academic programs with current industry standards in cybersecurity and information technology.{{cite web |title=Cybersecurity Experts Help Design WGU’s Programs |url=https://www.govinfosecurity.com/authors/mischel-kwon-i-1608 |website=GovInfoSecurity |access-date=June 1, 2025}}

Advocacy

Kwon is the founder of the Cybersecurity Diversity Foundation, a nonprofit focused on increasing the representation of women and minorities in the cybersecurity workforce through mentoring, scholarships, and awareness campaigns.{{cite web |title=Cybersecurity Diversity Foundation |url=https://cyberdiversityfoundation.square.site |access-date=June 6, 2025}}

Influence in cybersecurity

Kwon has contributed to the development of Security Operations Centers (SOCs) in both government and private sector settings. Her work at MKACyber, including the "W@tchtower SOC Methodology," has been referenced in approaches to incident response, threat management, and SOC organization.{{cite web |title=MKACyber CEO Mischel Kwon Named to the National Science Foundation's CyberCorps Scholarship for Service Hall of Fame |url=https://www.prweb.com/releases/mkacyber_ceo_mischel_kwon_named_to_the_national_science_foundation_s_cybercorps_scholarship_for_service_hall_of_fame/prweb15071297.htm |website=PRWeb |date=July 25, 2018 |access-date=June 1, 2025}}

She has also spoken on aligning cybersecurity practices with organizational risk management, encouraging communication strategies that prioritize business risk analysis over fear-based messaging. Her perspectives have been cited in cybersecurity publications, professional panels, and national security events.

Public speaking and media coverage

Kwon has been a frequent speaker at national cybersecurity conferences, including the RSA Conference, where she has discussed workforce development and SOC operations.{{cite web |title=Mischel Kwon - Speaker Bio |date=November 7, 2020 |url=https://www.rsaconference.com/experts/mischel-kwon |publisher=RSA Conference |access-date=May 17, 2025}}

She has also been featured in major media outlets discussing cyber threats and policy:

  • In a 2012 appearance on CNN’s The Situation Room, she analyzed the Flame malware cyber espionage tool.{{cite web |title=Transcript: CNN Situation Room on Flame malware |url=https://transcripts.cnn.com/show/sitroom/date/2012-06-01/segment/02 |website=CNN |date=June 1, 2012 |access-date=May 17, 2025}}
  • In June 2014, she joined a BankInfoSecurity panel titled "How Can Women Advance? Let Them Fail," emphasizing the need for women in cybersecurity to be allowed to take risks and grow through experience.{{cite web |title=How Can Women Advance? Let Them Fail |url=https://www.bankinfosecurity.com/how-can-women-advance-let-them-fail-a-6948 |website=BankInfoSecurity |date=June 12, 2014 |access-date=June 1, 2025}}
  • She was interviewed on Politico Live about third-party cybersecurity risks.{{cite web |title=POLITICO Pro Financial Services Report: Preventing Third Party Cyberattacks |url=https://www.politico.com/events/2014/06/politico-pro-financial-services-report-preventing-third-party-cyberattacks-190017 |website=POLITICO |date=June 2014 |access-date=May 17, 2025}}
  • In September 2017, Kwon was quoted in Healthcare IT News advocating for diversity in cybersecurity, arguing that varied perspectives improve understanding of threats and user behavior.{{cite web |title=Cybersecurity needs diversity of thought |url=https://www.healthcareitnews.com/news/cybersecurity-needs-diversity-thought-says-mischel-kwon |website=Healthcare IT News |date=September 26, 2017 |access-date=June 1, 2025}}
  • She participated in a 2017 Washington Post Live panel on the future of digital identity and the role of the Social Security number.{{cite news |title=Cybersecurity experts on the future of the Social Security number |url=https://www.washingtonpost.com/video/postlive/cybersecurity-experts-on-the-future-of-the-social-security-number/2017/11/08/4568bd72-c49c-11e7-9922-4151f5ca6168_video.html |newspaper=The Washington Post |date=November 8, 2017 |access-date=May 17, 2025}}
  • In December 2020, Kwon appeared on the OODAcast podcast, where she discussed her progression from software developer to federal cybersecurity leader and shared insights into SOC architecture and leadership.{{cite web |title=OODAcast: Mischel Kwon – Building Resilient SOCs |url=https://www.oodaloop.com/archive/2020/12/11/oodacast-mischel-kwon-building-resilient-socs/ |website=OODA Loop |date=December 11, 2020 |access-date=June 1, 2025}}
  • In February 2021, she was interviewed on the CISO Stories podcast, advising CISOs to avoid using fear to influence boards and instead use strategic, business-aligned messaging.{{cite web |title=Leadership Advice for CISOs: Mischel Kwon |url=https://securityweekly.com/shows/leadership-advice-for-cisos-mischel-kwon-ciso-stories-26/ |website=Security Weekly |date=February 24, 2021 |access-date=June 1, 2025}}

Congressional testimony

On March 16, 2011, Kwon testified before the United States House Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies during a hearing titled Examining the Cyber Threat to Critical Infrastructure and the American Economy. Representing Mischel Kwon Associates, she emphasized the need for a more autonomous and well-resourced US-CERT, and stressed the importance of building effective public–private partnerships to enhance national cybersecurity.{{cite web |title=Examining the Cyber Threat to Critical Infrastructure and the American Economy |url=https://www.globalsecurity.org/security/library/congress/2011_h/chrg-112hhrg72221.htm |publisher=U.S. House of Representatives |date=March 16, 2011 |access-date=June 1, 2025}}

Education

She holds a B.S. in Computer Science from the University of Maryland Global Campus and an M.S. in Computer Science from Marymount University. She served as an adjunct professor at George Washington University, where she also directed the Cyber Defense Lab.{{cite web |title=Thought Leader: Mischel Kwon |url=https://www.scmagazine.com/news/thought-leader-mischel-kwon |website=SC Media |date=July 2009 |access-date=May 30, 2025}}

Legacy

Kwon has contributed to the development of federal incident response capabilities and the implementation of Security Operations Center (SOC) practices within government and industry. Her work has been cited in discussions on threat detection, cyber risk management, and cybersecurity operations in organizational contexts.{{cite web |title=Leadership Advice for CISOs: Mischel Kwon |url=https://securityweekly.com/shows/leadership-advice-for-cisos-mischel-kwon-ciso-stories-26/ |website=Security Weekly |date=February 24, 2021 |access-date=June 1, 2025}}

See also

References