Skip to Main

Alex Asen is Boston Consulting Group’s global cybersecurity knowledge team lead. He provides security analysis and guidance to many BCG clients and case teams, while also helping direct and manage BCG's cybersecurity business. Alex is a Certified Information Systems Security Professional (CISSP) and a core member of the firm's Technology & Digital Advantage practice.

Alex supervises cybersecurity research, leads cyber knowledge capture and management, and contributes to new product development. He has helped clients in every major industry improve their security posture, with special focus on security organization health checks and benchmarking. He also frequently works with security vendors on product and sales strategy.

Alex joined BCG in 2012. Prior to coming to BCG, he founded and launched several technology startups and spent eight years as an IT consultant.

AREAS OF EXPERTISE

EDUCATION

  • JD, Columbia Law School  
  • BA, Brandeis University 

HONORS AND AWARDS

  • Certified Information Systems Security Professional (CISSP)

Publications and Videos

" "

BCG’s Annual Cybersecurity Survey 2023: As Budgets Get Tighter, Cybersecurity Must Get Smarter

A survey of chief information security officers reveals how advanced companies gain cyber maturity and what best practices they use to prepare for emerging threats in economically uncertain times.
spending-2880x1000-tcm9-214391.jpg

Are You Spending Enough on Cybersecurity?

The best response: answer this question with questions. That way, you can make an informed decision about what’s right for your organization.
building-a-cyberresilient-health-care-org-tcm9-179283.jpg

Building the Cyberresilient Health Care Organization

The cyberrisks to the health care industry include more than ransomware and threaten more than hospitals. All kinds of companies and institutions are vulnerable.
develop-a-cybersecurity-strategy-2880x1620-tcm9-173215.jpg

Develop a Cybersecurity Strategy as If Your Organization’s Existence Depends on It

As businesses increasingly rely on technology, addressing catastrophic risks—threats that could cause the loss of data, production systems, or intellectual property—must be on every executive’s agenda.
building-a-cyberresilient-organization-1694x950-tcm9-147044.jpg

Building a Cyberresilient Organization

Because no organization’s cyberdefenses are 100% impenetrable, companies need to develop the ability to weather and recover gracefully from the almost inevitable breaches.