Candis Orr (CISSP) is a Security Analyst at Bishop Fox, where she focuses on vulnerability management, social engineering, and information security governance. Candis is active in the security research community. She has presented talks on social engineering at Cactus Con and OWASP meetups. She also authored a blog post on password security.