# Dr. Mack Jackson Jr.

Dr. Mack Jackson Jr. is a cybersecurity strategic advisor who shares practical guidance on phishing prevention, cyber decoys, AI risk governance, insider risk, and security basics for organizations.

- Profile: https://b2binfluencer.marketing/creators/mack-jackson-jr/
- LinkedIn: https://www.linkedin.com/in/mackjacksonjr
- LinkedIn followers: 8,469
- Median of last 6 posts: 2 reactions, 0 comments (checked 2026-11-02)
- YouTube: https://www.youtube.com/channel/UC1WLqoyUNXzmPSFPBV0tMCw
- Topics: artificial-intelligence, cybersecurity, healthcare, vulnerability-management
- Based on 11 dated posts, latest 2026-10-07

## Summary

A cybersecurity strategic advisor useful for practical, co-branded education on phishing, decoys, AI risk, insider risk, and security basics.

- Best for: Cybersecurity consulting firms reaching nonprofits, healthcare teams, clinics, or groups without a security department.
- Not for: Paid consumer creator placements expecting rate cards, deliverable lists, demographics, or committed impressions and clicks.
- Check first: Request recent LinkedIn analytics or an audience survey showing follower geography, seniority, job function, and engagement.

### Takeaways

- Deploy cyber decoys in five steps, from placement to alert tuning and response planning.
- Ask five AI risk questions: where AI is used, who owns it, what data feeds it.
- Check CISA's Known Exploited Vulnerabilities Catalog weekly in 15 minutes against an asset inventory.

## Main ideas

- **Security is a routine, not a purchase**: Dr. Mack Jackson Jr. argues that protection comes from a small number of actions repeated on a set schedule, with an owner and a record for each one, rather than from one-off awareness or a new product. Cadence is treated as the control: a review that happens weekly catches known exploited flaws while quarterly cycles let them linger.
- **Fix AI governance before buying AI tools**: Dr. Mack Jackson Jr. argues that AI adoption is moving faster than the controls around it, and that risk reduction starts with fundamentals — clear ownership, protected data, and a tested failure response — not with adding tools. The posts treat governance as a set of answerable questions an organization can audit itself against.
- **Treat cyber decoys as a managed process**: Dr. Mack Jackson Jr. presents decoys not as a product to install but as an operating discipline that has to be tuned and revisited. The point is early warning: decoys can surface lateral movement, including activity from attackers using legitimate credentials and living-off-the-land tools, where conventional alerts are noisy or absent.
- **Insider risk needs coordination, not surveillance**: Dr. Mack Jackson Jr. frames insider risk as a prevention and coordination problem rather than a reason for suspicion. The argument is that an insider-risk program only works when security, HR, legal, management, and physical security act together, and that privacy and due process belong at the center of that design.
- **Phishing is a human timeline, and training is financial protection**: Dr. Mack Jackson Jr. locates phishing risk in people at specific moments — new hires who do not yet know what a legitimate internal request looks like — and argues that simulations, onboarding content, and verification through known channels reduce susceptibility. Training is then tied to commercial consequences, because insurers may ask for evidence that people are prepared.
- **The same basics, adapted to constrained organizations**: The advice is deliberately translated for organizations without a security department or a large budget. Rather than lowering the standard, Dr. Mack Jackson Jr. changes the framing — for nonprofits the connection is donor trust and funding readiness; for healthcare it is patient data and HIPAA expectations.

## Work to read

- [Deploy cyber decoys in five steps](https://www.linkedin.com/posts/mackjacksonjr_deploy-cyber-decoys-in-five-steps-1-start-activity-7509009262866698240-7vE3)
- [Cyber decoys can expose lateral movement](https://www.linkedin.com/posts/mackjacksonjr_cyber-decoys-can-expose-lateral-movement-activity-7508918879826427904--Lsd)
- [AI risk controls: five questions to ask](https://www.linkedin.com/posts/mackjacksonjr_ai-moves-fast-are-your-risk-controls-keeping-activity-7509371584738959360-CtCZ)
- [AI adoption is outpacing security governance](https://www.linkedin.com/posts/mackjacksonjr_ai-adoption-is-outpacing-security-governance-activity-7509281591223808000-vtE5)
- [AI-generated phishing can make a click roughly 4× more likely](https://www.linkedin.com/posts/mackjacksonjr_ai-generated-phishing-can-make-a-click-roughly-activity-7519066250807939073-9KWD)
- [Before you renew cyber insurance, can you show your people are prepared?](https://www.linkedin.com/posts/mackjacksonjr_before-you-renew-cyber-insurance-can-you-activity-7519428332673966080-oATP)
- [Insider risk calls for prevention, not paranoia](https://www.linkedin.com/posts/mackjacksonjr_insider-risk-calls-for-prevention-not-paranoia-activity-7510458962513891330-wXtY)
- [Quarterly KEV reviews leave too much time](https://www.linkedin.com/posts/mackjacksonjr_quarterly-kev-reviews-leave-too-much-time-activity-7520968375678779392-x8rm)
- [Your first 30 days don’t need a security department](https://www.linkedin.com/posts/mackjacksonjr_your-first-30-days-dont-need-a-security-activity-7519518295365091328-fb6A)
- [Nonprofits: five low-cost moves can make you a harder target](https://www.linkedin.com/posts/mackjacksonjr_nonprofits-five-low-cost-moves-can-make-activity-7519157027512946688-EFBg)
- [New hires may not yet know what a legitimate internal request looks like](https://www.linkedin.com/posts/mackjacksonjr_new-hires-may-not-yet-know-what-a-legitimate-activity-7518793955061452801-KY_r)

## Brand relationships

- **CISA** (mention)
- **Mandiant** (mention)
- **Verizon** (mention)
- **CrowdStrike** (mention)
- **FBI IC3** (mention)
- **NIST** (mention)

## Partnerships

The reviewed material does not document any published partnership or sponsorship packages for Dr. Mack Jackson Jr. Across 11 LinkedIn posts, the only recurring commercial invitation is a direct request to contact Dr. Mack Jackson Jr. for cybersecurity strategic advisory work, often paired with a free resource such as the Phishing Red-Flag Checklist. That means a buyer cannot currently plan against a rate card, deliverable menu, audience specification, or disclosed brand collaboration; the practical path is a direct conversation about advisory or co-branded content, with scope, deliverables, and terms agreed case by case rather than selected from a published offer. No official inquiry route for partnerships is verified: the only link in the evidence is a general LinkedIn profile, which is not a partnership contact page, so no inquiry link is shown for this section.

## Alternatives

- Debra Baker: A firm should consider Debra Baker when the campaign's center is compliance readiness rather than awareness and controls. The supplied posts speak to that decision directly: warning signs of an inexperienced compliance consultant, including reliance on generic checklists, an inability to explain why a control is required and what risk it addresses, and programs that aim at passing an audit instead of reducing risk; and the argument that un-audited software and data protocols leave regulatory and security exposure hidden inside a technology stack. If the brief is a co-branded piece for startups or small businesses preparing for SOC 2 or bringing in a vCISO, and the buyer's question is how to choose and supervise a compliance partner, this material lands closer to the purchase than Jackson's nonprofit, healthcare, and insurance-readiness posts do.
- Afzal Rehman: Afzal Rehman is the stronger starting point when the engagement is about data security architecture rather than awareness. The supplied posts argue that database performance monitoring can surface security events: an unusual number of queries, unexpected access to sensitive tables, abnormal data retrieval, a compromised account, possible exfiltration. They also make the case that database activity monitoring is one link in a chain that starts with knowing where data lives, controlling who can reach it, and securing it before anyone queries it, and that privacy obligations are distinct from security controls. For a firm selling to buyers who own databases and data platforms and who need a co-branded explainer on how monitoring, classification, and privacy fit together, this framing tracks the buyer's daily work more closely than Jackson's human-firewall and training material.
- Robert E.: Robert E. fits a brief that needs firsthand build experience or a media-ready voice on critical infrastructure. One supplied post describes building a home security operations center lab after months of delay, specifically to move past theory, understand how SIEM and SOC workflows operate in practice, and pressure-test where AI actually helps and where the human element still matters. The other describes appearing live on FOX 5 Atlanta to discuss cyber activity affecting regional water systems and suspected links to Iran, with the conclusion that prevention alone is insufficient and that detection, rapid response, tested recovery, and coordination between technology, operations, and leadership are what make an organization resilient. A firm that wants a practitioner who can speak from a lab bench, or a spokesperson comfortable on camera about utility and critical-infrastructure threats, gets something Jackson's posts do not offer.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/