Bruce Burroughs

As a member of the E-staff, we worked together to transform AAA for the next century with a mission to create Members for life. My role in that mission was to unleash the innovative spirit of our people, and lay a technology foundation that was well calibrated to the needs of the business. RESPONSIBILITIES As Chief Technology Officer (CTO) I run a team of 300 technologists responsible for delivering, secure, reliable, affordable, and highly functional technology across the enterprise. My leadership team consists of five VPs and SVPs, overseeing all IT & Cybersecurity for one of North America’s most trusted brands. My team transforms key business areas and maintains the technology our 6.7 million Members depend on. AAA provides critical support to Members in urgent situations. Whether it’s dispatching a tow truck when a vehicle breaks down on the side of the road or dispatching first responders to a triggered home security alarm, our technology platforms must be operational 24/7. Our systems are fast and intuitive, which is crucial for our command centers to respond to Members quickly and effectively. With a budget exceeding $90 million, my division supports more than 5,300 employees in delivering the exceptional service that has been a hallmark of AAA for over 120 years. OUTCOMES PRODUCED • Digital transformed the technology platforms that redefined how more than 6.7 million AAA Members access our legendary road service. This was a $30 million investment with a net present value (NPV) of $24 million, an impressive Internal Rate of Return (IRR) of 56%, and a remarkable payback period of just 2.7 years. • Realized $18M in hard savings that persists year over year via automation and simplification • Architected cyber defense-in-depth using NIST and zero trust guidelines • Update the Board quarterly on cyber security • Launched a cyber collaboration council across the AAA Federation to share insights and solutions

Technology Angle, Inc. is an IT and security services company. I founded the company to innovate and produce better approaches to current trouble spots for IT and security. Security | CISO as a Service As a practitioner within the company, I help customers build better security programs that: • Reach out and involve executives and employees • Empower specific councils to oversee prioritization and goals • Train employees to be much harder to trick • Ensure owners of systems, data and IP decide what’s best • Test often, and report-back to security councils • Keep foundational defenses strong (security hygiene) IT | CIO as a Service As a practitioner within the company, I help companies transform IT organizations to be: • Simpler and more adaptable • Integrated with decentralized security & business-unit IT groups • Delivering critical outcomes when they are needed • Participating in revenue goal pursuits and product innovation Human Capital Service As a practitioner within the company, I help customers build better teams that: • Are organized to function well with decentralized technology resources • Have highly talented team leaders that are highly collaborative • Leverage partners that help achieve maximum adaptability and simplicity • Scale up or down quickly and keep skill gaps to a minimum • Stay highly focused on team-goal aspirations and achievement EXAMPLES OF ENGAGEMENTS • Assisted new Heads of IT at fast moving companies maximize outcomes during their first 90 days • Produced a business strategy for an exec team • Migrated on-premise email system to Microsoft Office 365 • Produced DR and BCS plans • Protected sensitive data using encryption and the Cloud • Upgraded capacity and resilience of internet connectivity • Authored Dell's configuration guide for High Availability (HA) appliances

Enlisted in a tour of duty within an R&D startup-unit at HP to develop new cyber security strategies. Reported to CTO, Security Products, and former CIO/CTO of the NSA. RESPONSIBILITIES Constructing highly effective security capabilities for HP customers, leveraging CIO and strategy skills to collaborate with an elite team of security experts to invent new approaches that quickly strengthen security programs. OUTCOMES • Launched new consulting practice intent on harnessing all of HP’s security capabilities • Trained at HP’s Innovation Center in Israel to be an innovation coach for the engineering teams • Recurringly served as guest speaker for HP, to large customers in the Executive Briefing Center • Co-developed reference-model depicting key components of a complete/mature security program • Devised a mechanism for companies to decentralize security roles using communities-of-practice • Defined the go-to-market strategy for a new consulting practice • Led consulting engagements to re-engineer customer's security programs • Assisted in the pursuit of $1B+ revenue opportunities, organizing global responses to RFPs/RFIs

ArcSight was a highly successful security software company acquired by HP to add further depth to their security portfolio of products. Reported to the CFO, and member of the E-Staff. RESPONSIBILITIES Injected strategic leadership and ensured tactical delivery of mission critical initiatives for this high-growth high-tech company of 650 people, optimizing corporate business applications, computing infrastructure, engineering support, cyber security, and physical security. Managed a team of 45. OUTCOMES • Remediated urgent staffing problems and delivery breakdowns within first 30 days • Managed several mission-critical projects to successful implementation in first 90 days • Strengthened and focused a talented IT team to deliver results as fast as the business required • Fortified strategy to integrate applications in the Cloud • Guided implementation of Oracle E-Business Suite with On Demand hosting and disaster recovery • Delivered clean deployment of Avaya IP telephony and MS Unified Communication in first 30 days • Salvaged viability of new strategic product launch within first 60 days, and implemented on time • Opened a new building which included re-architecting the corporate network for future growth • Guided the implementation of several SaaS solutions (e.g. Flexera, QuickArrow) • Expanded access to the Jive collaboration platform • Instituted processes and procedures to defend against security threats • Transitioned ArcSight’s IT capabilities to HP

Technology Angle, Inc. is a Silicon Valley IT services company that I founded in 2008. RESPONSIBILITIES Consulted with corporate executives to resolve significant business issues, crafting actionable strategic plans, delivering key initiatives and fulfilling the role of interim CIO. OUTCOMES Engagement: CIO/CTO role reporting to President & COO • Developed strategic business plan specifying valuable operational and technology transformations • Re-engineered core business processes, reducing complexity and doubling workforce productivity • Migrated in-house applications to the Salesforce.com and other Cloud platforms • Implemented the Avaya IP phone system across the organization • Served as Chief Technology Officer while representing the company in BD efforts Engagement: CIO role reporting to CFO • Produced roadmap to convert client's financial systems to a leading ERP platform • Designed the integration of order-to-cash function between Salesforce.com and NetSuite • Sourced, evaluated and managed competing vendors to identify the best; negotiated pricing/scope

RESPONSIBILITIES Integrating all IT functions and managing corporate purchasing for this high-tech company of 2,000 people ranked in the world’s top 10 busiest website brands (160M unique users/month, 90M web page views/day). Managed eight direct reports/65 total. Reported to CFO. OUTCOMES • Led global IT services across the Americas, EMEA and APAC • Improved project quality and predictability by optimizing Agile and Waterfall methodology choices • Integrated infrastructure and applications teams • Resolved critical issues emanating from an inherited problematic Oracle implementation in China • Addressed impending audit issues and strengthened SOX controls, attaining 100% compliance • Resolved compliance issues resulting from the mismanagement of software license tracking • Resolved mobile device stability issues • Implemented MS Unified Communications on a global basis • Implemented global budget and forecast system • Instituted disaster recovery capability • Implemented automated requisition and purchase requests • Saved >$2M annually through improved vendor management and software licencing

Symantec is a security software and solutions company. Responsible for: Directing the global applications team that implemented and supported Symantec's corporate systems including Oracle, Siebel, PeopleSoft, Data Warehouses, Corporate Internet and Norton Antivirus Renewal systems; and subsequently (post-Veritas merger) integrating the two companies' internet applications and back office systems. Managed four direct reports/220 total worldwide. Reported to CIO.

OppenheimerFunds is a financial services company. Responsible for: Managing the integrity and stability of application systems, IT planning, controls and governance, and business partnerships. Ran an IT managed-services group that generated revenue by providing IT systems to financial firms that were similar to OppenheimerFunds. Managed five direct reports/120 total. Reported to COO.

Responsible for: Leading strategic planning and system implementations that distinguished the firm from other top tier accounting and consultancy firms. Managed 30-person teams. Reported to Partners of the Firm in a matrix model. Managed customer expectations, holding full project P&L.