“40 under 40” Class of 2019 — Adam Stiffler, 32

Manager, Global Security Operations Center (GSOC), Biogen
Friday, November 1, 2019

Adam Stiffler manages the GSOC for Biogen, a pharmaceutical company specializing in neuroscience and treatments for multiple sclerosis and spinal muscular atrophy.

“The GSOC is a support function for the global security department and ultimately the business Biogen, so we support a multitude of responsibilities, including everything from access control and physical security elements to intelligence and incidence recognition to escalation communications and identifying potential or confirmed impacts to the Biogen business and assets,” Stiffler explained. “Whether those risks are to physical sites, residential locations, supply chain, employees/travelers, or company reputation, we are the first line of defense for identifying, understanding and communicating those risks.”

Because Biogen delivers products to more than 100 countries worldwide and has more than 40 physical locations, security does open-source and social media monitoring. “We have a pretty extensive footprint to monitor risk; we utilize open source and social media tools to quickly identify those risks and take actions to inform and mitigate.”

As part of the next generation in security, Stiffler sees the culture around security changing. “The old perception of security has been guns, gates and guards, but the way we look at security is — how do we add value to and support the business.? It is about giving people timely information and guidance and enabling people to do their jobs without worry; we do all the worrying for them.”

Thinking to the future, the goal is to have “a common operating picture, where you can see everything — supply chain, travel, physical locations, etc. — in one snapshot,” Stiffler said. “Data is important because you can use data to drive policy and procedures or awareness, for example. I do think more automation on metrics would be helpful to security, and new technology can help us to better quantify the output of the GSOC.”