Registration & Breakfast

<p>During this time attendees are encouraged to join the Forum Tabletop Break that provides an opportunity to connect with solution providers and explore emerging technologies. Stretch your legs and network with your peers over snacks and coffee.</p>

Morning Break

<p>ChatGPT and open source AI tools have pushed the technology into the mainstream, opening a Pandora&rsquo;s Box of potential security concerns. In this session, we&rsquo;ll zoom in on the enterprise risk side of this conversation, focusing on the real security threats these tools present and the risks associated with using AI in internal and customer-facing products. IANS Faculty member Shannon Lietz will cover:</p><ul><li>What&rsquo;s real and what&rsquo;s hype: How to assess and address the threats that could materially impact your business.</li><li>When and how to participate in product development conversations involving AI tools.</li><li>How to educate the C-Suite and board to ensure a consistent governance approach in your organization.</li></ul>

Mainstream AI Is Here: What Should We Do About It

<p>Shannon is the Founder and CEO of ThirdScore. This followed her role as VP, Security at Adobe, where she led Product and Software Security. Shannon is also the Founder of DevSecOps, a non-profit organization committed to uniting security with DevOps and Agile practices via experimentation and education. Shannon is an award-winning security innovator and leader experienced in developing emerging security programs for Fortune 500 companies including Intuit, ServiceNow, Sony, Sempra, Savvis, Cable &amp; Wireless, 99 Cents Only, Exodus, and Bank of America.</p>

CISO Roundtable Opening Remarks and Introductions

Closing Remarks

<div><p>Zero Trust initiatives demand strategic leadership to guide them through complex, often multi-year efforts that can easily lose support from the business. CISOs must filter through the vendor hype and lead their teams to develop a cohesive, manageable path to a zero trust configuration that aligns with security and business goals. In this session, IANS Faculty member Dave Shackleford will provide guidance on how to:</p><ul><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;">Define a governance structure that aligns zero trust initiatives to business goals</span></li><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;"></span>Implement zero trust in the three main areas: server-to-server, cloud identity and services, end users to on-prem and cloud</li><li>Move from isolated projects to a formalized strategy</li></ul></div>

Create a Realistic Roadmap for Zero Trust

<p>Dave is the Founder and Principal Consultant with Voodoo Security, an 
information security consulting firm with broad expertise. He is also a 
Senior Instructor, Analyst, and Course Author for the SANS Institute and
 a VMware vExpert with extensive experience designing and configuring 
secure virtualized infrastructures. In addition, Dave has served as 
Co-Chair of the Cloud Security Alliance (CSA) Top Threats Working Group 
and founded the CSA Atlanta Chapter. Dave has consulted with hundreds of
 organizations in the areas of security, regulatory compliance, network 
architecture, and engineering. He has also worked as a security 
architect, analyst, and manager for several Fortune 500 companies.
</p>

<p>Throughout the roundtable, three solution providers will provide a rundown of how they deliver value. The feedback session is a discussion of the solution providers without the vendor present. It&rsquo;s an opportunity to get inside intelligence on vendors you may be considering for your environment.</p>

Vendor Feedback Session

<p>In this workshop, IANS Faculty member Russell Eubanks will lead a hands-on discussion around strategies CISOs can employ to keep their teams engaged and efficient through change. He&rsquo;ll cover:<br /></p><ul type="disc"><li>Establishing a cohesive culture capable of providing a stable backdrop that smooths the path to change.</li><li>Aligning changes to broad organizational goals to keep your teams focused and help them prioritize.</li><li>How to ensure you model this behavior for the teams you are privileged to lead.<br /></li></ul>

How Can a CISO Drive Culture Change?

Russell is the founder and CEO of Security Ever After and helps companies who lost their CISO reduce their cybersecurity risk. He is the former CIO and CISO of the Federal Reserve Bank of Atlanta and is a Principal Instructor and Author with the SANS
Institute.
<br><br>Russell has developed information security programs from the ground up and also led extensive cybersecurity teams. Russell actively seeks opportunities to add value to organizations and measurably increase their overall security posture

Solution Provider Case Study

Solution Provider Case Study #2

Lunch

<p>During this session, CISOs participating in the event will be split into break-out groups and given discussion prompts on operational challenges they may be facing. It&rsquo;s a time to ask questions and share solutions with peers. </p>

Peer-to-Peer Discussion Session

<p>The CISO role is being elevated within organizations. In response, CISOs must build their executive skillsets to better collaborate with the C-Suite, handle board meetings and connect infosec with key business objectives. This session will help CISOs on that journey through guidance from Shamla Naidoo, a former Global CISO with extensive experience coaching CISOs to succeed in complex organizations. She&rsquo;ll tap into her experience to discuss:</p><ul><li>Specific skills that are most important for CISOs as they work within the C-Suite.</li><li>Cross-functional projects to take on or lead that can help you develop those skills.</li><li>How to develop networks and build alliances</li></ul>

Lessons From Infosec Executive Coaches

<p>Shamla is the Head of Cloud Strategy and Innovation at Netskope and a former Managing Partner and Global CISO at IBM. She is a Board Director at both QBE and Stonebridge Acquisition Capital&nbsp;and a Board Member at ReferencePoint. Shamla’s experience spans 38+ years in a variety of sectors and 6&nbsp;continents, making her an expert in cross-cultural collaboration and working across industries. She is recognized as a leader in applying security to enable priorities of the business. Her background also includes authoring and teaching several courses for the University of Illinois Chicago School of Law in technology,&nbsp;security, and privacy law. Shamla coaches professionals on leadership, board communication and how to&nbsp;align security with strategic business initiatives.&nbsp;</p>

Solution Provider Case Study #1

Solution Provider Case Study #3

<div><p>The new SEC breach disclosure rules represent a continuation of a trend of increased liability risk for CISOs. This panel discussion is designed to provide hands-on guidance on how you can manage liability risk for yourself and your business. It will cover topics including:</p><ul><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;">How orgs are thinking about D&amp;O insurance/indemnity for CISOs and how to negotiate for what you need during hiring or retention conversations.</span></li><li><span style="background-color:initial;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;white-space:inherit;word-spacing:normal;caret-color:auto;"></span>The liability issues boards are concerned about and ways CISOs can inform the board to maintain sufficient visibility into risk.</li><li>How to refine board and executive communication tactics to better bring those audiences into key conversations around incident materiality and disclosure.</li></ul></div>

Managing Liability in Light of the SEC Rules

<p>Steve is a partner in Artico Search’s cybersecurity practice. He is an expert in security executive recruiting and compensation focused on recruiting best-in-class CISOs and their teams across various industries. he leads strategic partnerships
and initiatives including Artico’s annual CISO compensation &amp; budget survey conducted in collaboration with IANS. <br><br>Prior to Artico, Steve served in Caldwell Partner's cybersecurity practice and at Russell Reynolds associates.</p>

<div><p>Summer is a three-time CISO in the autonomous vehicle industry currently at Torc Robotics, which specializes in AI software for long-haul trucking. She is also a faculty member at Carnegie Mellon University where she teaches a graduate course in cybersecurity
        policy and multiple courses on cybersecurity metrics and product&nbsp;cybersecurity for executive education programs. In addition, Summer serves on the board of directors for Brentwood Bank,&nbsp;a regional&nbsp;bank in Pittsburgh, PA. She is
        also an active&nbsp;board&nbsp;member for the Forte Group, an advocacy and education non-profit focused on amplifying women in technology,&nbsp;cybersecurity, and privacy. Summer is often requested to speak at conferences and events, and she has
        provided expert testimony on cybersecurity risk in the US Congress.<br><br></p><p>Prior to her role at Torc Robotics, Summer worked at Motional and Argo AI, both AI companies focused on robo-taxi technology. She also led cybersecurity&nbsp;risk and resilience at Carnegie Mellon University's CERT program and Johns Hopkins University's
        Applied Physics Lab. Summer started her career as a software engineer at Northrop Grumman Corporation after receiving her MS and BS in Computer Science from the University of Pittsburgh.<br></p></div>

<p>Brian is an experienced senior executive and board advisor with over 30 years of experience in global assignments. He provides advice to directors and officers as a Principal with The CAP Group – a boutique advisory firm he founded in 2017. He is an early-stage investor in cybersecurity and artificial intelligence firms, providing guidance as both advisor and board member. His expertise is informed by his executive leadership roles with premier firms. Prior to founding CAP, Brian was Accenture’s Global Managing Director responsible for Cybersecurity Strategy, focused on clients with critical infrastructure portfolios. He was also a Managing Director (Partner) with KPMG, focused on technology risk identification and mitigation. Previously, he was the global technology executive responsible for all technology of Marathon Oil, a Fortune-40 integrated oil company.</p>



<p>Justin Daniels is a cybersecurity subject matter expert who is also a corporate attorney who specializes in M&amp;A and other business transactions. He is an equity partner at the law firm Baker Donelson, an Am law 60 firm.<br></p><br><p>He has developed deep subject matter expertise in cybersecurity as he believes cybersecurity is a strategic business enterprise risk. He quarterbacks the design and implementation of cyber plans. He also handles incident response from wire fraud to ransomware.
    He also brings a cyber lens to business and legal issues in day to day operations, mergers and acquisitions, investment capital transactions.</p>

Afternoon Break

<p></p><div><p>The Board and executive team&rsquo;s governance perspective is shifting as issues like ESG investing/reporting, new SEC regulations around cyber disclosure and increased corporate liability for cyber incidents force attention onto infosec and privacy risk. IANS Faculty member Summer Craze-Fowler will discuss how CISOs should adjust these changes, covering:</p></div><ul><li>How infosec fits into the ESG picture and what CISOs can do to give the board actionable guidance to manage ESG risk.</li><li>Tactical steps CISOs can take to adapt to the new SEC Cyber Breach Disclosure regulations.</li><li>Changing patterns in litigation toward officers and boards of directors in the aftermath of litigation and what CISOs need to do to protect themselves and the organization.</li></ul>

How CISOs Can Adapt to Shifting Governance Expectations

<p>The same core security weaknesses continue to be pain points in the industry year over year as building a strong foundation often takes a backseat to addressing the here-and-now. Taking a strategic approach to mastering security essentials enables teams to strengthen that foundation. In this session, IANS Faculty Nicole Dove will lead a conversation with Summer Fowler, IANS Faculty and SVP, Cybersecurity and IT at Motional, Gretchen Hiley, CISO, North America at Randstad USA, and Michelle Stewart, CISO at Safe-Guard Products International&nbsp;<span style="background-color:transparent;color:inherit;font-family:inherit;font-size:inherit;text-align:inherit;text-transform:inherit;word-spacing:normal;caret-color:auto;white-space:inherit;">on how they&rsquo;re tackling these issues. They&rsquo;ll discuss:</span></p><ul><li>The core, foundational elements of security programs that not enough security leaders focus on</li><li>Examples of team and program successes that result from a focus on the foundations, as well as challenges or events that occurred due to a lack of focus on the foundations</li><li>How mastering the essential elements of your program &ndash; both technical and strategic &ndash; can help you stay relevant and aligned with future business and customer needs</li></ul>

IANS Welcome & Keynote Panel: Mastering the Essentials: Build a Strong Foundation

<p>Nicole is an award-winning information security leader with 18
years of experience driving results across cybersecurity, audit, global
operations and relationship management functions. As Head of Security for Riot
Games, she leads a team of BISOs focused on developing and deploying cybersecurity
strategies that align with business priorities. Nicole uses a practical,
balanced approach to maturing risk and security programs, leveraging her
experience from investment banking, media, offshoring, audit and management
consulting to enable innovation, manage risk, drive operational efficiencies
and improve client experience.</p>

2023 Atlanta CISO Roundtable Agenda

2023 CISO Roundtables

Attendee Contact

<p>&nbsp;</p><div><p>The IANS CISO Roundtable is an opportunity to engage with your peers and tap into the expertise of IANS Faculty members and leading subject matter experts in the industry. The event contains sessions on a mix of topics designed to strengthen a CISO’s executive skills.</p><p>CISO Roundtables are community-driven events. But this isn’t community purely for socialization or networking. It is an opportunity to talk through your challenges, get advice and benchmark with other CISOs through interactive content and peer-to-peer discussions. Join a Roundtable for a chance to participate in the IANS community and the insights it has to offer.</p><div><br></div><div><a href="https://www.iansresearch.com/what-we-do/events/roundtables/details/2023/04/4/2023-ciso-roundtables/23-ciso-minneapolis-philadelphia#career"><div></div></a></div></div><div>&nbsp;</div><p>&nbsp;</p>

General Information

Register Now

This one-day roundtable is designed exclusively for CISOs and senior level information security executives to learn and share insights in a confidential setting.

CISO Roundtable

The IANS CISO Roundtable is an opportunity to engage with your peers and tap into the expertise of IANS Faculty members and leading subject matter experts in the industry.

2023 Atlanta CISO Roundtable

Omni Atlanta Hotel at CNN Center 100 CNN Center Atlanta, GA 30303

Professional Development

Executive Competencies

Live Online Training

Online Training Library

Compensation & Budget

Take the Survey

Reports

Survey Visualization Tool

Executive Communications

Incident Command Center

Resource Center

Events

Forums

CISO Roundtables

Symposiums

Webinars

Vendor Assessment Community

Who We Are

About Us

Our Story

Careers

Contact Us

What We Do

InfoSec-Specific Executive Development for CISOs and Aspiring Security Leaders.

Live Faculty-led instruction and interactive labs to build you and your team"s InfoSec skills.

2023 Atlanta

CISO Roundtable

Contact us at:

Contact us at: