Penske Corporation

In 1969, Roger Penske had a vision to transform the transportation industry. He purchased a small car and light-truck rental and leasing business serving eastern Pennsylvania with just three locations. From those humble beginnings, Penske recognized that businesses needed more than just trucks - they needed a partner who understood their unique challenges and could deliver innovative solutions to keep their operations moving forward. What started as a regional rental company has evolved into a global transportation leader spanning North America, South America, Europe, Asia, and Australia. Penske pioneered the full-service leasing model, combining fleet management with comprehensive maintenance services. Today, with operations across more than 1,000 locations and a fleet exceeding 300,000 vehicles, Penske continues to push boundaries - pioneering commercial electric trucks, developing connected fleet technologies, and providing end-to-end logistics solutions that power the world's supply chains. The company's relentless focus on customer service, operational excellence, and innovative thinking has made it the trusted partner for businesses ranging from local enterprises to global corporations.

Penske Truck Leasing operates as a closely-held transportation services company with over 43,000 associates managing a fleet of 420,000 vehicles nationwide. The company has sustained operations for more than 50 years, positioning itself as a transportation and logistics industry leader providing commercial truck rental, leasing, maintenance, and supply chain solutions. Roger Penske leads the organization, which maintains headquarters in the United States. The company's technical infrastructure spans four core domains: fleet maintenance operations with dedicated technician workforce, driver operations for goods delivery, logistics and transportation services coordination, and fleet management systems. The operational model relies on a hands-on approach where maintaining vehicle uptime, driver safety, and supply chain continuity creates direct dependencies on secure operations across physical and digital systems. With 420,000 vehicles generating operational data, driver coordination systems, and fleet management platforms, the attack surface extends across both operational technology and enterprise IT environments. Penske's stated commitment to safety and operational excellence creates clear security imperatives - any compromise to fleet management systems, driver communication networks, or maintenance scheduling infrastructure could cascade into supply chain disruptions affecting customer operations. The company emphasizes trust as a cultural foundation and operates with what it describes as a customer-first mindset, suggesting reputational risk sensitivity that elevates the stakes for security incidents. For security professionals, the environment presents challenges typical of diversified transportation operations: protecting legacy maintenance systems, securing modern logistics platforms, and managing risk across a distributed associate base operating physical assets. The company offers career development pathways including a Management Trainee Program, indicating investment in long-term talent development. The scale of operations - 43,000 associates coordinating nearly half a million vehicles - suggests complexity in identity management, access controls, and security policy enforcement across geographically distributed operations. The company characterizes its workforce as a winning team bringing dedication and expertise to operational roles, though specific security team structure or tooling details are not publicly disclosed.

Castelion Corporation is a defense technology company building affordable hypersonic weapons at scale, founded by former SpaceX executives who are applying Apollo-era prototyping philosophy to national security hardware. The company controls critical technologies in-house through vertical integration - a deliberate strategy to eliminate the supply chain bottlenecks and extended timelines that define traditional defense primes. Their development model rejects cost-plus contracts in favor of hardware-rich iteration: constant testing, rapid prototyping, and real-world validation cycles instead of multi-year planning phases. The technical stack reflects both operational security requirements and modern cloud infrastructure: CrowdStrike and Palo Alto handle endpoint and network security, Splunk provides logging and analytics, while deployments span AWS, Azure, and GCP. Development work involves C/C++ and Python for systems-level engineering, with NodeJS handling web services and Siemens NX/Teamcenter managing CAD and PLM workflows. The threat model here is multi-layered - nation-state actors targeting weapons development IP, supply chain integrity for hardware components, and the operational security demands of classified defense programs. Castelion's culture prizes velocity over hierarchy, with new hires owning critical projects from day one regardless of seniority. Cross-disciplinary collaboration is required when you're building hypersonic systems that demand mechanical, electrical, software, and materials engineering all moving in lockstep. The security team operates in an environment where urgency isn't marketing speak - it's tied to restoring deterrence capabilities while managing classified data flows, cloud-native deployments, and hardware development cycles that move faster than traditional defense bureaucracy allows.

Diligent Corporation runs the boardroom infrastructure for 75% of the Fortune 500 - over 1 million users across 130 countries relying on its platform to centralize governance, risk, and compliance operations. Founded in 1994 to replace paper-based board materials with secure digital collaboration tools, the company has since evolved into an AI-powered GRC platform that consolidates governance activities, risk assessment, and compliance workflows into a single environment. The threat model here is straightforward: breaches at the board level expose strategic decisions, M&A activity, and executive communications before they're public. Diligent's security posture reflects that reality, operating infrastructure instrumented with SIEM, EDR, CNAP, CSPM, and vulnerability scanning across its stack. The platform's scale creates interesting operational challenges - managing secure document sharing and collaboration for enterprise clients means handling sensitive materials under varying regulatory frameworks worldwide. Growth has come through both internal development and strategic acquisitions, expanding the product surface from board pack digitization into broader GRC tooling. The company positions AI as a decision-support layer across governance workflows, though specific implementation details aren't publicly detailed. For security teams, the environment involves protecting a high-value target with a mature compliance footprint, serving clients where data exposure carries reputational and legal consequences that extend well beyond typical enterprise breaches.

Diné Development Corporation is a Navajo Nation-owned federal contractor operating nine subsidiaries across IT, engineering, and professional services. Founded in 2004, the company employs 700+ staff delivering solutions to over 250 federal agencies, tribal governments, and commercial clients - spanning defense, intelligence, homeland security, and healthcare sectors. DDC has returned more than $4 million in dividends and $11 million in philanthropic contributions to the Navajo Nation since inception. The technical footprint includes Oracle and PL/SQL database operations, z/OS mainframe systems, and containerized infrastructure using Docker and Kubernetes. DevSecOps tooling runs on GitLab pipelines with SonarQube for code analysis, while infrastructure-as-code deployments use Terraform and Ansible. Federal contracts mean navigating clearance requirements, compliance frameworks like FedRAMP and NIST 800-53, and cross-domain environments where air-gapped networks and strict access controls are standard. The threat model centers on nation-state adversaries targeting federal systems and the supply chain risks inherent in contractor relationships with defense and intelligence customers. Security teams operate within federal acquisition regulations and tribal sovereignty frameworks simultaneously - a jurisdictional complexity that shapes incident response, data handling, and personnel vetting processes distinct from typical commercial contractors.

McKesson is a diversified healthcare services leader that touches virtually every aspect of health. As a Fortune 10 company with a legacy spanning nearly two centuries, McKesson partners with payors, hospitals, physician offices, pharmacies, pharmaceutical companies, and others across the spectrum of care to build healthier organizations that deliver better care to patients in every setting. The company operates through four primary business segments: North American Pharmaceutical distribution, Oncology and Multispecialty solutions, Medical-Surgical Solutions, and Prescription Technology Solutions. Founded in 1833, McKesson has evolved from a drug import and wholesale business into a global healthcare powerhouse. The company distributes approximately one-third of all pharmaceuticals used in North America and serves as a critical link in the healthcare supply chain. McKesson has demonstrated resilience and innovation through major public health crises, from the 1918 flu pandemic to COVID-19 vaccine distribution. With 45,000 employees across North America, McKesson continues to advance health outcomes through its expertise in distribution logistics, oncology research and care management, healthcare technology, and data analytics.