Black Kite Welcomes Jack Jones, Originator of FAIR™, as Strategic Advisor to Deliver on its Strategic Vision to Improve the Health and Safety of the World's Cyber Ecosystem

Risk management and information security thought leader to advise on product roadmap and priorities to advance opportunities enabling organizations to gain a complete understanding of their cyber ecosystem risk

BOSTON, July 24, 2025 /PRNewswire/ -- Black Kite, the leader in cyber third-party risk intelligence, today announced that Jack Jones, the originator of industry's standard risk measurement model known as Factor Analysis of Information Risk (FAIR) and the FAIR Controls Analytics Model (FAIR-CAM), has joined as Strategic Advisor. Jones will advise on Black Kite's product roadmap, continued evolution of the platform analytics, and market educational opportunities. He will work closely with Black Kite's leadership team to enhance the company's competitiveness and growth.

"We are honored to welcome Jack as our Strategic Advisor," said Paul Paget, CEO of Black Kite. "As the father of FAIR, a global cyber risk framework, and an award-winning leader in risk management and information security, he has dedicated his illustrious career to developing proven, effective methods so that organizations worldwide can better manage and quantify information risk. His tireless advocacy to advance the discipline of cyber and operational risk management has been crucial for the cybersecurity industry. My colleagues and I look forward to collaborating with Jack as together we work toward our vision where every organization is in control of the cyber third-party ecosystem."

As the creator of FAIR and FAIR-CAM, Jones is a foremost authority in risk management and information security. FAIR has been adopted by organizations of all sizes and includes 17,000-plus members worldwide. Today, FAIR is regularly included in graduate-level university courses on information security and referenced by other industry standards. He also co-authored the book "Measuring and Managing Information Risk - A FAIR Approach", which was inducted into the Cybersecurity Canon as an industry "must read." Additionally, he served on the ISACA task force that created the RiskIT framework and led the ISACA group, which developed the CRISC certification.

With 35-plus years of cybersecurity experience, Jones is a three-time CISO and IT risk officer. His work has received numerous industry awards and recognitions, including the 2006 ISSA Excellence in the Field of Security Practices award, finalist award for the 2007 Information Security Executive of the Year, Central US, and the 2012 CSO Compass Award for Leadership in Risk Management.

Today, Jones is a strategic advisor for forward thinking organizations and solution providers, including Safe Security, Ostrich, and Citalid, to help them understand and more effectively manage their cyber and operational risk landscapes. He is a globally recognized speaker and an adjunct instructor of cyber risk measurement for Carnegie Mellon University. Jones is also Chairman Emeritus of The FAIR Institute and still chairs the standards committee.

"Black Kite stands out for its proven track record in delivering solutions that empower organizations to manage cyber risk at scale and improve business resiliency," said Jack Jones, Strategic Advisor of Black Kite. "Their commitment to innovation enables them to deliver the highest-quality data, mapped to industry standards like FAIR and MITRE. I am excited to join the Black Kite team as they enter their next phase of growth. Together, we will bring value through innovation and empower organizations to make better business decisions by providing a complete, accurate understanding of their cyber risks."

About Black Kite
Black Kite gives organizations a comprehensive, real-time view into cyber ecosystem risk so they can make informed risk decisions and improve business resilience while continuously monitoring more vendors, partners, and suppliers in an ever-changing digital landscape. Through an automated process, and a combination of threat, business and risk information, Black Kite provides cyber risk intelligence that goes beyond a simple risk score or rating. Black Kite serves more than 3,000 customers in a wide range of industries and has received numerous industry awards and recognition from customers.

Learn more at www.blackkite.com, or on the Black Kite blog.

Media Contact:
Michelle Kearney
Hi-Touch PR
443-857-9468
[email protected]

SOURCE Black Kite