Skip to main content

Brett A. Tucker

Carnegie Mellon University
Heinz College
Education
Bachelors in Science in Chemical Engineering from University of Notre Dame, Master of Engineering Management from Old Dominion University, MBA from Penn State University
Profile

Brett Tucker is a Senior Program Manager at Battelle Memorial Institute. I am dedicated to advancing technology, policy, and security for our nation’s nuclear power industry.

Previously, I was a Technical Manager of Cyber Risk Management in the CERT Program at Carnegie Mellon University’s (CMU) Software Engineering Institute (SEI). I was responsible for a research and development portfolio focused on improving the security and resilience of the nation’s critical infrastructure and assets with specific focus on risk and resilience. I have retained and maintain my adjunct professor appointment by teaching executive and graduate level courses as a CERT adjunct professor at the Heinz College and serves as the Technical Sponsor for the Executive Chief Risk Officer training program.

Prior to joining the SEI, I was the Global Risk Manager for Westinghouse Electric Company where I managed the corporate enterprise risk portfolio and global insurance programs. Preceding that role, I also managed a project controls organization as well as led the engineering, procurement, and installation of Instrumentation & Control suites for AP1000 nuclear power plants.

Prior to Westinghouse, I served as an intelligence officer at the Central Intelligence Agency and also as a defense contractor for the Naval Sea Systems Command. I am a veteran of the United States Navy and served as a Surface Warfare Officer and qualified naval nuclear engineer.

I have a Bachelor of Science degree in Chemical Engineering from the University of Notre Dame, a Master degree in Engineering Management from Old Dominion University, and an MBA from Penn State University having graduated as the top graduate in my cohort.

I am an active member in the local business community as PMI certified Project Management Professional (PMP) and an ASQ Certified Six Sigma Black Belt (CSSBB). I am also an ISC^2 Certified Information Systems Security Professional (CISSP) and Certified Governance, Risk, and Compliance Professional (CGRC formally the CAP). I recently graduated from Leadership Pittsburgh CLCV cohort XII.

Skill sets include: Significant experience in engineering, security, risk, resilience, and management. Demonstrable successes in program and project management, government contracting, Enterprise Risk Management (ERM), and industrial plant operations and maintenance across highly regulated industries that span public and private sectors. Specific areas of accountability have included: risk management, nuclear engineering, cybersecurity, physical security, policy development, engineering management, audit, lean-six sigma, project controls, budgeting, business continuity and disaster recovery, corporate insurance, resource planning, staffing, training, and cost control.

Research

I have a diverse set of interests linked to my adjunct professorship at Carnegie Mellon University as well as my full-time employment at Battelle Memorial Institute. I have a strong background in cyber risk, risk management, artificial intelligence, and nuclear engineering. As an example, I am currently conducting research related to the impacts of Q-day for the nuclear industry and related sectors. More specifically, I am trying to develop cost effective processes and tools for implementation of crypto-agility given the limited budgets of critical infrastructure organizations.

Most Cited Publications

“Advancing Risk Management Capability Using the OCTAVE FORTE Process” – Software Engineering Institute, November 2020.

“Loss Magnitude Estimation in Support of Business Impact Analysis” – Software Engineering Institute Technical Report, December 2020.

“Building a New Assessment: How to Assess Ransomware Attack Readiness and Recovery” – Defense Technical Information Center Technical Report, October 2023.

“Striking the Balance: Measuring and Managing the Complexity of Cyber Environments (cmu.edu)” – Software Engineering Institute Presentation, February 2023.

Recent Publications

“Q-Day Countdown: Are you Prepared” – SEI Webcast, October 2025.

“Standardization of Return on Risk Investment Computation” – SEI White Paper, October 2025.

“Cyber Risk Management Program Development for Risk-Based Decision Making” – Department of Defense Cybersecurity & Information Systems Information Analysis Center Presentation, September 2025.

“Building a More Redundant Backup Capability” – Billington Cybersecurity Summit Panelist, September 2025.

“Untangle the Ball of Fuzz - Leveraging Insights on Cyber System Complexity | RSA Conference” – RSA Conference Presentation, April 2025.