He has twenty-five years of experience in information security, beginning with the Central Intelligence Agency. Lance has a Ph.D. in Information Science from the University of Texas, where he also teaches courses on security, intelligence, and surveillance. He is the author of IT Security Metrics from McGraw-Hill. He is certified as a CISSP, CISM, CRISC, and ISO 27001 Lead Auditor.