1. Navigating the Reorg Reality
Current state of the Cybersecurity and Infrastructure split.
Operational security is officially being pulled out of the Cybersecurity Division and moved into Infrastructure to centralize operations. The Cyber Risk side will retain the ISO/Compliance roles (maintaining ATOs, POAMs, etc.).
Security Network Operations (SNO), headed by Brian Gaselbrock, is now a 90+ person umbrella housing architectural and operational teams, including Solutions Design, Security Operations, WAN, and Managed Office groups. Bridging the gap between "old school" mentalities and new architectures is a primary cultural focus moving forward.
Executive / Jen's Boss"] --> Jen["Jen
Director / Executive"] Jen --> CSD["Cybersecurity Division"] Jen --> Infra["Infrastructure Division"] %% Cybersecurity Branch CSD --> Nicole["Nicole Bogiai
Acting CISO"] Nicole --> CyberRisk["Cyber Risk
ISO & Compliance"] %% Infrastructure Branch Infra --> Hosting["Hosting Group"] Infra --> EntApps["Enterprise Applications
AD, etc."] Infra --> PM["PM Group
Dana"] Infra --> SNO["Security Network Operations
Brian Gaselbrock (Level 15)"] %% Security Network Operations (SNO) Sub-groups SNO --> Solutions["Solutions Design Group
Daniel (Level 14)
~9 people"] SNO --> WAN["WAN Group
Steve Harrington
~10 people"] SNO --> SecGroup["Security Group
David
~9 people"] SNO --> ManagedOffice["Managed Office Group
~50 people"] SNO --> Telecom["Telecom Groups
VoIP, Teams, etc."] %% Other Mentioned SNO Section Heads SNO --> Tracy["Tracy
Section Head"] SNO --> Blanchard["Brian Blanchard
Section Head"]
2. Executive Profile: Rick
Understanding leadership data consumption habits to drive platform adoption.
How He Consumes Data
- Highly Hands-On: He wants direct access to tools. He prefers logging into portals (like asking for SolarWinds access) over reading static reports.
- Anti-PowerPoint: For presentations, he expects live demos (e.g., logging directly into Meraki or Cisco ISE) rather than slide decks.
- Logical Thinker: He focuses heavily on numbers, statistics, and logical organization (e.g., his desire to re-IP the entire network so an IP address inherently reveals its physical location).
Strategic Takeaway
Giving Rick static reports or basic site monitors will not satisfy him. He needs to feel like he is "under the hood." Building tools that allow him to actively search, filter, and discover network data on his own will secure executive buy-in for the Gobo platform.
3. The Gobo "Easy Button" Strategy
Transforming Gobo from a passive monitor into an actionable enterprise tool.
Win 1: The Helpdesk "Trifecta"
A unified troubleshooting dashboard for Desktop Support to diagnose Wi-Fi and NAC failures without escalating to Tier 3 engineering.
- Meraki API: Physical AP location and tags.
- Intune API: Device health, certs, and supplicant state.
- Cisco ISE API: Step-by-step 802.1x auth validation logs.
Win 2: Rick's IP Search Bar
A Google-style search bar catering to the SOC and Executives. Paste an IP address, and Gobo instantly maps the enterprise data.
- Bypasses failed IPAM implementations.
- Returns physical site location.
- Returns hardware type (FortiGate, Cisco Router).
- Returns local point of contact.
Gobo Systems Architecture
Session Data, DNS and Routing"] Meraki["Cisco Meraki
AP Tags, Rogue APs and User Location
POC: Eric"] end subgraph identity [Identity and Access Validation] Entra["Microsoft Entra / AD
User Identity
Status: Active"] Intune["Microsoft Intune
Device Supplicant and Certs
Owner: Troy Cobb"] ISE["Cisco ISE
802.1x Auth Validation Steps
Owner: Steve Harrington"] end Gobo(("Gobo Platform
Actionable Intelligence and Aggregation")) %% API Connections into Gobo FAZ -->|"Network Visibility / Threat Data"| Gobo Meraki -->|"API: AP State / Client Mapping"| Gobo Entra -->|"API: User Context"| Gobo Intune -->|"API: Machine Identity"| Gobo ISE -->|"API: Step-by-Step Auth Logs"| Gobo subgraph dashboards [Dashboards and End-Users] Helpdesk["Helpdesk / Desktop Support
Real-time Wi-Fi and Access Troubleshooting"] Rick["Executive View
Ricks Search Bar - IP to Location/Service"] Ops["Network and Security Ops
Historical Threat Tracking and Single Pane"] end %% Gobo Outputs Gobo -->|"The Easy Button"| Helpdesk Gobo -->|"IP Mapping and Asset Discovery"| Rick Gobo -->|"Lateral Movement Insights"| Ops