In memory of Mr. Harold F. Tipton

It is with a heavy heart that I write this entry. As many of you likely already know, we lost a great information security warrior on Friday. At the age of 89, Mr. Harold F. Tipton, a founder of (ISC)², keeper of the (ISC)² CBK and mentor to thousands, passed away. He played many distinguished roles: 

CBK Chair or co-chair for all (ISC)² certifications

Past President of (ISC)²

Chief Instructor for (ISC)²

Ambassador for (ISC)²

U.S. Navy Fighter Pilot

Typical of Hal, he worked until the day he went into the hospital. This kind of dedication inspired thousands of people around the world. Below are some things people who knew him well have said about him. If you knew Hal and would like to share your story, please add a comment here or follow the conversation on InterSeC. Or, click here to listen to Mr. Tipton’s reflections on the profession. 

---

From Dr. Corey Schou, CSSLP, Fellow of (ISC)², Creator of the (ISC)² CBK, member, (ISC)² Board of Directors

I met Hal when we were first forming (ISC)².  I had to make a presentation to the Board of Directors of ISSA; he was the chair/president.  They had agreed to cooperate with the creation of the CBK; however, Hal wanted the whole board to hear from the individuals forming the consortium.  It was a daunting meeting – his reputation preceded him. When I first saw him, all I could think of was Admiral Bull Halsley.  Hal made it easy. With his encouragement and guidance from the chair, the agreement was struck.  All members of the original consortium were on board. 

I got to know Hal much better over the years; he was always willing to pitch in on all sorts of projects.  He visited my campus several times and contributed to the NIST and CNSS projects we were working on in addition to (ISC)².  It was marvelous to watch him work with my students. He was gentle but insisted that they get it right before he would let them rest.  About 20 years ago, one of my students went to work for a major semi-conductor firm in the IT area.  The security manager kept arguing about how some access control should be implemented.  Finally, my young friend called Hal and asked the question – Hal told him he was a little busy but a day or two later he sent a letter – explaining why the security manager had it wrong.  The former student merely framed the letter and hung it on the wall in his cube.  When the argument continued, all he had to say was, “Hal said…” and point at the framed letter. 

Many years later, I received a phone call from a good friend to see if I could come to a meeting in Chicago.  Although I was in the middle of a long trip, I said, “for you”, I will go through Chicago.  I had been tricked into coming to an award ceremony.  I was taken aback when I was told I had been given the first Tipton Award.  I was absolutely humbled by the honor from my peers – BUT to receive the award named after one of the absolute greats in the certification of computer security professionals. 

Hal and I received the award at the same time.  There will always be a special kinship.  I will miss the all too infrequent phone calls.

---

From Peter, Andrej, Markus, Sandro and Richard, for the (ISC)² Chapter Switzerland and Rainer, Arne, Guenter, Hubertus for the (ISC)² Chapter Germany

We just received the news that Hal Tipton passed away this morning.

We would like to share our condolences on this occasion. The entire profession is indebted to Hal for his work on the CISSP CBK. He was an original and deep thinker, an enterprising individual and at the same time an easygoing person with a great sense of humor.

Some of us had the pleasure of working with Hal on several occasions, and it was always a pleasure, an experience - and great fun.

Our thoughts go out to Hal's family and friends, many of who are in (ISC)².

 

---

From Kevin Henry, CISSP-ISSEP, CISA, CISM, CBCI, CRISC, CSWAE, (ISC)² Authorized Instructor, former Head of Educational Services for (ISC)², and he served as the former Co-chair of the CBK committees with Hal:

Perhaps the greatest tribute we can give a person

Is the measure of the impact they have had on lives around them

The way they affected and encouraged their friends

Touched and influenced their family

And made the world a better place

 
There are no words to be said that can express our grief

The passing of a great man – a pioneer and warrior and a servant

One that gave his life and time

Expended his passion

And laughed at so many things

 

He was indeed the Grand Gentleman of Information Security

Setting a standard that none other can attain

Of nobility, grace and selfless work

Hal was a man of his era

That defined the world of information security

Saw it borne from the ashes of the past

And embraced the opportunities of the present

 

Working tirelessly and unceasingly Hal sought to build an industry

That would provide real value

Through many years of instructor development

Course program management and quality assurance

Hal set the standards of excellence and completeness that was needed

 

What was the course without Hal questioning the content

What was an instructor without Hal demanding perfection

What is information security without Hal leading the way

 

Hal bore many slights and criticisms and yet was not discouraged

He worked in silence and determination – with a mind to make a difference every day

And do what he could

 

 

Comments

[Vehbi Tasar]

Hal's death hit me hard, so hard that it took me two days to be able to cry. I know there is much to remember, much to say, but I don't know what I can add... except,

There is a time for the evening under starlight,
A time for the evening under lamplight
(The evening with the photograph album).
Love is most nearly itself
When here and now cease to matter.
Old men ought to be explorers
Here and there does not matter
We must be still and still moving
Into another intensity
For a further union, a deeper communion
Through the dark cold and the empty desolation,
The wave cry, the wind cry, and vast waters
of the petrel and the porpoise. In my end is my beginning..

T.S. Eliot

Good bye Hal!

[Phil Agcaoili]

You made a difference, Hal. The CISSP is your legacy.

Rest in peace.

[Keith Weinberger]

My thoughts and condolences go out to Hal's family at this time.

I first met Hal teaching the CBK for ISC2 when the instructors were volunteers from the community. He helped me become a lead instructor and through that experience I gained a lot of friends and colleagues.

For many of us in the early days Hal was our information security voice and evangelist. He helped shape the communities that we currently have, and we are ever grateful for his leadership and mentorship.

Rest in peace my friend.

[Zhang Suoran]

I am sorry to hear this.
Although I had not met him before, but I have to say that he was a great man, and he will be missed.

[K S Sesha Prakash, CISA, CISSP, ISO 27001 LA, BSc., BCom, JAIIB - IS Auditor and InfoSec Trainer]

I just learnt of the news that Mr.Harold Tipton passed away.

My heartfelt condolences to the family of Mr.Harold Tipton on this sad occasion.

I am indebited to the ISC(2) created by him, as it gave me a new professional focus on security and as a freelance trainer.

As a part of the security community I acknowledge the immense difference he made to a lot of us, though not known personally.

I hope god gives the strength to the family to bear the sad loss.

May the soul rest in peace.

[Brian Schultz]

From Brian Schultz, CISSP, ISSMP, ISSAP, Member of the (ISC)² North American Advisory Board, Former ISSA Board Member, ISSA Fellow, Co-Author with Hal on one of his many editions of the Information Security Management Handbooks:

I first met Hal at a meeting in 2001 with Susan Hansche to redesign the CISSP review course from a two week course to a one week course. I was immediately impressed with his depth of knowledge and his complete understanding of human behavior. We became friends and he invited me to write for his next edition of the Information Security Management Handbook. He was a man of immeasurable patience and a tireless contributor to the information security profession.

The information security profession has lost a great mentor. However, his legacy lives on through each of us who practice the profession today and well into the future. Thanks Hal!

[David Wilson]

I never met Hal but I met his work. I may not have known Hal but I can say I agree with him and would have very much liked to have met him.
Serving humanity is no small feat. ISC2 is a group whose ideals are put to paper. It is one thing to do what is good and right. It is another to LEAD others in doing what is good and right.
I am honored and humbled to follow in his footsteps.
I wish his family peace. We all thank you for Hal.
God Bless

[Dan Houser]

Words alone are inadequate to express the impact from the passing of this friend of our profession. Like Vehbi, I was stunned and rocked to my core for so many days that only now can I accept this.

Hal did so much for all of us, and for the world. We are a safer society because of his work, but Hal would never tell you that, as his humility would prevent it. We owe Hal a debt of gratitude that cannot be repaid.

Rest well, respected colleague, you have earned the full measure of our respect, gratitude and thanks, for your tireless efforts for us all.

[Dara G. Murray, CISSP]

When I heard the news of his passing, I immediately started to cry. As one of the originial members of ISC2, he was influential to recommending that I get certified as a CISSP. He was a forward thinker and knew that although the organization would start off small, it would eventually be what it is today and how it will continue to expand. He was a true gentleman and I will miss him terribly.

[Charles V. Pask CISSP, M.Inst.ISP]

I was lucky to meet Hal on a number of occasions and was fortunate enough to be selected by him to be a lead instructor for ISC2 for Middle East, Europe and Africa. I was very saddened to receive the news this week while I was away in Muscat. What a wonderful man Hal was. One was instantly aware that he was special. He was a listener, modest to extreme and his dealings with people showed he had class - our industry's integrity and professionalism was far more important to him. He was a mentor, and more than that he helped you when you asked a question without questioning your own sense of understanding - he just explained it in a way you could visualise and then explain it yourself. On e-mailing him and John Berti once regarding the confusion so many students had over MAC, DAC etc, - especially over the desire by some authors to try and explain the rational - I received a response very quickly and I remember that it was the first time I had seen the word "obfuscate" used to explain the situation. It was prefect. God bless you Hal.

[Danny Ha, ISC2 ISLA Honorees 2007, CISSP, CSSLP, CISA, CISM, CGEIT, CRISC, FCRP, CRT, CPM, ITIL Expert, MBA, Certification Trainer and Auditor]

~~ Hal's contribution would go on forever

I would like to share my condolences on this occasion to his family.

After all these years of infosec era, the greatest tribute we can give a person, Mr. Harold Tipton.

I am indebted to the CISSP CBK created by Hal, as it gave me, my students and infosec professionals, CEOs and leaders in Hong Kong a sharp focus on expectations of information security profession that providing career advancement opportunities and benefit to businesses, other industries and humanity cultural growth of many countries.

Serving humanity is no small feat. His contribution would go on forever.

May the soul rest in peace.

Danny
Chairman
Academy of Professional Certification (APC)
http://www.apc.org.hk
Hong Kong

[Bruce Lobree]

I remember writing the first CISSP training book with Hal. He was not only an outstanding teacher but a great mentor. He helped us set up the first CISSP training sessions in San Francisco and either taught or coordinated teaching every subject matter. He was a resource of information that can't be matched and his passion can only be emulated, but never matched.

He will be forever be missed and remembered.