CIO operator, cybersecurity leader, IDC advisor, author, and business translator.
My work focuses on reducing friction, exposing risk, simplifying systems, and turning technology into measurable business leverage.
Most technology problems show up as business friction first. Slow decisions. Duplicate work. Conflicting data. Fragile integrations. Unclear ownership. I help leaders find the source of that friction and decide what to simplify, secure, govern, or retire.
The work is practical: reduce friction, make risk visible, improve decision quality, and align technology investment with business outcomes.
Technology strategy, cybersecurity governance, tech debt assessment, and executive decision support for CEOs, CFOs, boards, and ownership groups.
Explore advisory services →Keynotes, panels, podcasts, and executive roundtables on tech debt, cybersecurity leadership, AI readiness, data governance, and CIO leadership.
View speaking topics →Practical frameworks and field-tested language for turning technical complexity into business conversations leaders can act on.
See the frameworks →Dr. Ken Knapton has spent more than two decades in C-level IT roles, leading transformation across financial services, mortgage origination, healthcare, high-tech, hospitality, and entertainment. He is known for one core ability: making technology legible and accountable to the business leaders who fund it.
His background spans software development, enterprise security, CIO and CISO leadership, IDC research, graduate cybersecurity faculty work, and authorship. That mix gives his work a practical point of view. Technology should reduce friction, improve trust, protect the business, and create measurable leverage.
Today, Ken serves as CIO at Win Brands LLC, the hospitality company behind Costa Vida Fresh Mexican Grill and FatCats Family Entertainment. He also advises small and mid-market businesses through Rocky Mountain CIO, contributes published research as an IDC Adjunct Research Advisor for IT Executive Programs, and teaches graduate-level cybersecurity at ECPI University.
Technology complexity is business friction. Great CIOs reduce that friction until the business can move faster with more confidence.
Core Brand ThesisThese frameworks turn technical complexity into management discipline. They help leaders see where technology creates leverage, where it creates risk, and where simplification will move the business faster.
A business-facing way to quantify, communicate, and govern enterprise tech debt so it can be discussed with CEOs, CFOs, and boards.
A practical lens for measuring business value per dollar of complexity. The goal is not fewer systems for its own sake. The goal is better leverage.
Data sprawl, hoarding, and rot create operational drag and AI risk. Data governance is part of the technology debt conversation.
Third-party services, APIs, cloud dependencies, and shared data flows extend the risk perimeter. Leaders need visibility before failure exposes it.
At Win Brands, Ken leads technology across Costa Vida and FatCats, where IT is tightly connected to guest experience, store operations, cybersecurity, data, infrastructure, support, and enterprise platforms.
That operating role shapes how he writes, speaks, teaches, and advises. The work is grounded in the reality of distributed locations, frontline users, customer-facing systems, shared services, vendor platforms, executive tradeoffs, and practical governance.
Platform choices affect speed, accuracy, support burden, and guest experience. The CIO role is to make those tradeoffs visible and actionable.
The conversation changes when tech debt is framed as business drag, decision latency, risk concentration, and reduced ability to execute.
Security improves when risk is documented, ownership is clear, controls are understood, and leaders can see whether exposure is increasing or decreasing.
Rocky Mountain CIO is now on its own page with service details, engagement model, and contact path.
Ken speaks to CIO, CISO, board, and business audiences on enterprise tech debt, cybersecurity leadership, AI readiness, data governance, and the work of translating technology into business outcomes.
How CIOs can turn technical drag into an executive management discipline using leverage, risk, speed, and value.
What negative time-to-exploit means for cyber resilience and how leaders should think beyond patch availability.
Why AI readiness starts with cleaning up the data estate, clarifying ownership, and reducing unmanaged data sprawl.
Why awareness alone does not create adoption, and what leaders must do to build durable security behavior.
Keynotes
Executive roundtables
Panels and podcasts
CIO and CISO events
Boards and leadership teams
Time-to-exploit as a measurable, board-ready cyber resilience metric.
CIO.comWhy adoption matters as much as awareness.
CSO OnlineMeasuring and presenting tech debt leverage for midmarket executives.
PodcastHow shared services support scale across Costa Vida and FatCats.
Video InterviewEnterprise tech debt slows decisions, raises risk, and makes execution harder. This book gives executives a practical way to discuss, measure, and manage that drag in business terms.
The book supports Ken's broader advisory and speaking work by giving leadership teams a common language for complexity, risk, value, and technology leverage.
Ken is also the author of Cyber Safety: A Family Guide to Online Security & Technology Standards, which draws on his enterprise security background to help families establish practical technology standards at home.
Perspectives drawn from the CIO seat, IDC research, and years spent turning technical complexity into business decisions.
Why negative TTE changes the cyber resilience conversation.
Connecting tech debt reduction to AI, cybersecurity, and competitiveness.
Short executive posts on tech debt, cybersecurity, leadership, trust, and practical governance.
Use the calendar for advisory, speaking, media, or executive briefing conversations.
Based in Utah, serving clients and audiences nationally. Available for executive advisory work, keynotes, panels, podcasts, and board-level briefings.