Cybersecurity And Risk Management Leader Angel Mosley Launches AI-Powered Simulation Platform To Train Leaders On How To Respond To Cyber Business Crisis

Angel Mosley is equipping companies to mitigate cybersecurity risks.

Mosley is a cybersecurity consultant and risk management professional who was first inspired to join the field while at Jackson State University. She scored an internship with Virgin Records and BMG Distribution and was living the dream, she told AFROTECH™. She even had a chance to be around entertainers such as Janet Jackson and Ice Cube.

Ultimately, her interest in the field would be sparked after wandering into a computer room.

“When you’re in college, you think you can ask anybody anything. So I was like, ‘Hey, how much money did you make when you graduated from college?’ [And they said], ‘Oh, we graduated making $60,000 a year,’ which back then was a lot of money. Right now, it’s still good money,” Mosley explained. “But I was like, $30,000, $60,000. I’ve always liked computers. I went back to school, changed my major to computer science, and never looked back.”

She graduated from Jackson State University in 1994 and has done everything under the sun in the field, whether it was crawling under a desk to connect cables or working second shift at a bank in a computer room. She later moved into compliance at a law firm, where she deepened her understanding of how to secure systems and put the right controls in place.

“There was this new thing coming out called Sarbanes-Oxley, or SOX, as some people know it, which is a regulation,” Mosley said, referring to the Sarbanes-Oxley Act of 2002, which required accurate and reliable financial reporting by public companies. “And it came about because of big companies doing bad things like Enron and MCI … It made people go to jail. And so nobody wanted to go to jail.”

She continued, “Then I started learning about auditing and IT auditing, and that’s how I transitioned into cybersecurity, because I had to learn how to secure these systems and how to put controls so that when the regulators came around, we had the right controls and nobody in my company went to jail.”

CyBase Risk Management

After more than 20 years of working in IT and cybersecurity, Mosley has stepped into ownership. She is the founder of CyBase Risk Management, a Dallas-based cybersecurity firm she launched in 2024 after being laid off from a role where she was recruited to build the company’s governance, risk, and compliance department.

Her inspiration to found the company stemmed from a cybersecurity incident that occurred at Lincoln College, which she read about in a newspaper. According to IT Governance USA, the college, which was already struggling, experienced a ransomware attack that it could not recover from, leading it to shut down permanently after 157 years. Now, Mosley aims to work with colleges; small- to medium-sized businesses in high-risk sectors such as health care, finance, legal, real estate, and education; and companies that are not at the enterprise level and may not have adequate resources, staff, and controls in place.

CyFireAI

The firm has launched CyFireAI, an AI-powered simulation platform that uses real-world breach scenarios to strengthen cyber crisis readiness and trains clients and their teams on how to respond to attacks. The tool also ensures alignment across operations, including finance, PR, HR, and legal, so everyone is prepared to respond promptly.

Before team exercises, participants are encouraged to complete an individual, role-based quiz that generates simulations tailored to their specific responsibilities.

“We ask questions of the company or the representative of the company to find out what their company culture is, what their tech stack looks like, and whether or not they’ve ever been breached,” Mosley said. “And then we build specific incidents around that for the company and the leadership team. And then they get an opportunity to practice what their response would be before it’s actually real.

“I tell people to think of it as a fire drill for their digital assets,” she added. “And so that is CyFireAI.”

Mosley herself spent 10 years working as an incident response commander, so she carries expertise in providing information for decision-making and coaching. In doing so, she has also recognized several gaps in how cybersecurity threats are handled.

First, there is an assumption that IT can handle all aspects of a threat and make all the necessary decisions associated with it, she says. Other gaps include legal readiness, having an attorney available during incidents, and cybersecurity insurance to recoup potential losses.

“You have an insider threat, you hired an employee that is a criminal or a thief and you didn’t know it,” Mosley explained. “Or they’re not a criminal and a thief, they’re just down on their luck and somebody reached out to them and said, ‘Hey, I will pay you $100 a file if you exfiltrate this data out and give it to me.’ And their house is being foreclosed on, and they’re just down on their luck. They’re gonna take that chance. Now your data is being exfiltrated by an employee that you trust, and you have no controls to prevent that.

“So having that cybersecurity insurance is another gap in knowledge that the leadership team, especially with small, medium-sized businesses, don’t even know they need,” she added.

CyFireAI will identify those critical gaps across an unlimited range of scenarios, building until the issue is resolved, she says. From there, overall performance in communication, compliance, and containment will be provided, along with a timeline for decision-making and an overall rating.

An industry-compliant incident response plan will be generated, and Mosley will work with clients, converting those recommendations into a high-level project plan. Through that process her firm will break down what tasks need to be fulfilled in order of most to least important, along with estimated costs and the level of effort required to implement each control.

She also partners with managed service providers who handle the technical implementation, such as installing software and delivering the IT services outlined in her roadmap, and insurance brokers for compliance, insurability, and to improve cyber resilience. She noted that her business has scaled to include cyber business crisis as well.

CyFireAI is currently in pilot, seeking to partner with 10 companies. For more information, check out the website.