Ricardo Lafosse is chief information security officer for Morningstar. Lafosse is responsible for IT risk governance, software and product security, incident management, technical disaster recovery, and determining enterprise-wide security policies and procedures. He regularly presents on security topics at global conferences, including MirCon, ISACA CACS, and Secure World.

Prior to his current role, Lafosse was chief information security officer for Cook County Homeland Security and Emergency Management, where he was responsible for providing strategic information security leadership, implementation, and governance for the information security program.

Lafosse has more than 14 years of experience in information security for the government, banking, legal, healthcare, and education sectors. He began his career in information security consulting in finance and manufacturing.

Lafosse holds a bachelor’s degree in management information systems from Florida Atlantic University and a master’s degree in information assurance from Iowa State University. Lafosse also holds the Certified Information Systems Security Professional and Certified Information Security Manager designations.