Article
Matt Thomson
Never Have I Ever
Watched Tiger King
I’d Eat That
Pickled eggs
Motivated By
Family
Best New Thing
Garden boxes
It Takes Me Back
Late 80’s or early 90’s cartoons
Don't Laugh At My…
Drawing skills
Favorite Smell
Bourbon aging in a warehouse
Book I Recommend
To Kill a Mockingbird
Matt Thomson helps businesses cut through the noise of cybersecurity risk. As M3’s Director of Cyber Liability, he serves as both strategist and guide, helping clients understand today’s complex threat landscape and design smart risk-management solutions that protect what they’ve built.
His career blends hands-on cybersecurity leadership with a deep understanding of insurance and risk transfer. Before joining M3, Matt served as a cyberspace operations officer in the U.S. Air Force and later led cybersecurity efforts for Breakthrough and Community First Credit Union. That frontline experience gives him a unique perspective: he knows what it’s like to prevent, respond to, and recover from real-world cyber events.
At M3, Matt leads the development of our cyber book of business, collaborates with carrier partners, and provides clients with both education and actionable strategies to manage exposures.
Matt is currently enrolled in the Executive MBA program at Notre Dame, and holds a master’s degree in Information Assurance from the University of Maryland Global Campus, a bachelor’s in Computer Science from Marquette University, and several respected security certifications. He joined M3 in 2022.
Designations
- GIAC Certified Incident Handler (GCIH)
- GIAC Penetration Tester (GPEN)
- Previous Certified Information Systems Security Professional (CISSP)
Involvement
- Founder of Cybersecurity Meetup (920Sec) in the Fox Valley
- Planning committee memeber of Grassr00tz Security Conference in the Fox Valley
Guiding leaders through cyber risk.
Matt’s sweet spot is translating complex cybersecurity issues into clear, practical strategies for business leaders. He specializes in helping organizations assess their cyber risks and model potential exposures, while also guiding them through the process of building incident response plans that actually work when they’re needed most. His background allows him to advise on technical risk mitigation, from implementing effective security controls to developing employee awareness programs that reduce human error, while also leveraging insurance as a critical safety net when prevention alone isn’t enough. Beyond client work, Matt is passionate about industry education, often speaking and training on emerging cyber threats, regulatory shifts, and best practices for resilience.
