Matthew Butkovic
Technical Director, Cyber Risk and Resilience Assurance Directorate - Software Engineering Institute - Carnegie Mellon University

Matthew Butkovic


Matthew Butkovic is the technical director of the Cyber Risk and Resilience Assurance Directorate in the CERT Division of the Software Engineering Institute at Carnegie Mellon University (CMU). Butkovic performs critical infrastructure protection research and develops methods, tools, and techniques for evaluating capabilities and managing risk. This includes addressing the challenges of complex supply chains. Butkovic teaches graduate-level cybersecurity policy courses at the CMU Heinz College. He is also an instructor, focused on organizational resilience and supply chain risk management, for the CMU Heinz College CISO and CRO Executive Certificate Programs.

Butkovic has more than 20 years of managerial and technical experience in information technology—particularly information systems security, process design, and audit—in the banking and manufacturing sectors. Prior to joining the CERT Division in 2010, Butkovic was leading information security and business resilience efforts for a Fortune 500 manufacturing organization.

Butkovic is a Certified Information Systems Security Professional (CISSP) and Certified Information Systems Auditor (CISA). He earned degrees at the University of Pittsburgh (BA) and Pennsylvania State University (MS).