Conversations with CAP: David Feeney talks ESRM

Conversations with CAP: Featuring David Feeney on ESRM and Strategic Security Leadership

A deep dive into risk-based security strategy, professional standards, and the evolving role of the security function with CAP Index’s newest expert.

In this episode of Conversations with CAP, host Walter Palmer welcomes David Feeney, a seasoned security professional with more than 20 years of experience across operations, consulting, and standards development. David recently joined CAP Index as Vice President of Security Consulting, bringing deep expertise in security risk management and a long-standing commitment to elevating industry standards.

Demystifying Enterprise Security Risk Management (ESRM)

The conversation centers on Enterprise Security Risk Management (ESRM)—what it is, why it matters, and how it enables security teams to align more strategically with organizational goals. David discusses the importance of shifting security’s role from enforcer to advisor, empowering asset owners to make informed, accountable decisions.

From Standards to Strategy: David’s Background and Industry Involvement

Drawing on his leadership roles with ASIS International and the ISO Technical Committee, as well as his consulting experience at Deloitte, David shares real-world insights into implementing ESRM principles, building collaborative security programs, and navigating the growing convergence of physical and cybersecurity.

The Role of Data in Better Risk Decisions

David also emphasizes the importance of using objective tools—like crime risk data and benchmarking—to guide prioritization and strengthen decision-making frameworks. These insights help organizations apply risk management consistently and strategically across diverse environments.

Read Episode Transcript.