Solution Provider Case Study

Solution Provider Case Study 3

Throughout the roundtable, three solution providers will provide a rundown of how they deliver value. The feedback session is a discussion of the solution providers without the vendor present. It&rsquo;s an opportunity to get inside intelligence on vendors you may be considering for your environment.

Solution Provider Feedback Session

<div data-block-id="block-00efd120-7e17-49ef-94ed-922b741d0cc7"><p>As cyber risk gets more board-level scrutiny, becoming more comfortable and effective in the board room is critical. In this workshop, IANS Faculty AJ King will lead participants in a set of hands-on exercises to help them plan for their next board briefing. Participants will work together in small groups to develop board talking points, including:</p><ul><li>Key metrics to tie cyber to business goals and help the board govern the org&rsquo;s digital risk posture.</li><li>Critical cyber initiatives for the year and why those plans are valuable to the broader org.</li><li>Updates on projects in motion &ndash; in this exercise, using an OT use case to illustrate effective communication methods.</li><li>Expect to build a sample briefing with a team of CISOs and present it to get feedback from your peers.</li></ul></div>

Workshop: Building Your Next Cyber Briefing for the Board

<p>AJ is the CISO for Hunter Strategy where he leads their Cyber Security consulting practice advising clients in public, private, and government spaces. His core skills include cyber security leadership, security architecture, third-party vendor risk management,
    program management, and general governance practices.<br></p><p>Prior to his current role, AJ has developed information security programs from the ground up leading extensive cybersecurity teams in support of globally distributed companies. AJ actively seeks opportunities to add value to organizations and measurably
    increase their overall security posture. As an active member in the information security community AJ is a member of ISSA, Infragard, and a regular at local events such as SecDSM and SecKC.</p>

CISO Roundtable Opening Remarks and Introductions

<div data-block-id="block-37b1b666-2825-4177-b10b-2c928009141e">In our Spring roundtable, we discussed emerging areas of legal and privacy risk when using GenAI. In this Fall session, we&rsquo;re going to focus on two areas of risk that are becoming prevalent in real-world use cases &ndash; bias and regulatory pressure. IANS Faculty Jodi and Justin Daniels will discuss:</div><ul><li>The legal implications of AI discrimination and how to build adequate policy and governance measures to reduce risk of bias.</li><li>Emerging AI regulations and what to expect as regulatory bodies push to control the use of the technology.</li><li>How to elevate these risks to board-level conversations that influence governance decision-making.</li></ul>

Managing the Legal and Privacy Risks of GenAI: Part 2 – Bias and Regulations

<p>Jodi Daniels is a Founder and CEO of Red Clover Advisors, a privacy consultancy, that integrates data privacy strategy and compliance into a flexible, scalable approach that simplifies complex privacy challenges. A Certified Information Privacy Professional, Jodi brings over 25 years of experience in privacy, marketing, strategy, and finance across diverse sectors, working and supporting startups to Fortune 500 companies. </p><p>Jodi Daniels is a national keynote speaker, host of the top ranked She Said Privacy/He Said Security Podcast and WSJ best-selling author of Data Reimagined: Building Trust One Byte at a Time, and also has been featured in The Economist, WSJ, Forbes, Inc. and more. Jodi holds an MBA and a BBA from Emory University’s Goizueta Business School.&nbsp;</p>

<p>Justin Daniels is a cybersecurity subject matter expert who is also a corporate attorney who specializes in M&amp;A and other business transactions. He is an equity partner at the law firm Baker Donelson, an Am law 60 firm.<br></p><br><p>He has developed deep subject matter expertise in cybersecurity as he believes cybersecurity is a strategic business enterprise risk. He quarterbacks the design and implementation of cyber plans. He also handles incident response from wire fraud to ransomware.
    He also brings a cyber lens to business and legal issues in day to day operations, mergers and acquisitions, investment capital transactions.</p>

Solution Provider Case Study 2

During this time attendees are encouraged to join the Forum Tabletop Break that provides an opportunity to connect with solution providers and explore emerging technologies. Stretch your legs and network with your peers over snacks and coffee.

Morning Break

Solution Provider Case Study 1

<div data-block-id="block-0fc5dd21-7abb-4f97-91af-c59682f96bf7">Each year, IANS and Artico Search team up to survey CISOs about their compensation, budgets and perception of their role in the organization. Pulling from that data, Steve Martano, IANS Faculty member and partner for Artico Search&rsquo;s cyber division, and Nick Kakolowski, IANS Senior Research Director, will discuss ways CISOs can use benchmarking data for career planning and development. Specifically, we&rsquo;ll cover:</div><ul><li>Multi-year compensation trends, how CISOs can pinpoint their current position in the industry and how to identify realistic paths to advance in the role.</li><li>Data on the scope of the CISO role and background of CISOs to help you identify target areas for skills development as you progress in your career.</li><li>Observations from the hiring market and advice on how to navigate career-related conversations, whether you are considering a move or looking to grow within your current org.</li></ul>

Benchmarking to Develop Your Career

<p>Steve is a partner in Artico Search’s cybersecurity practice. He is an expert in security executive recruiting and compensation focused on recruiting best-in-class CISOs and their teams across various industries. He leads strategic partnerships
and initiatives including Artico’s annual CISO compensation &amp; budget survey conducted in collaboration with IANS. <br><br>Prior to Artico, Steve served in Caldwell Partner's cybersecurity practice and at Russell Reynolds associates.</p>

At the conclusion of the CISO Roundtable you are welcomed to join the remaining Forum Faculty Sessions from&nbsp;3:55-4:35 and Networking Reception from 4:35-5:30.&nbsp;

Closing Remarks

<div data-block-id="block-d17ffa10-9652-4b77-bbad-f7701e2c7a65">Gen AI risk is an increasingly vital conversation in the board room. This session will take a case study approach to tangibly describe the real-world risks of using Gen AI. IANS Faculty Jake Williams will:</div><ul><li>Walk through a Gen AI project, talking through risk pain points and how they were resolved.</li><li>Provide in-depth analysis of lessons learned as a result of the project.</li><li>Lead a discussion on AI projects participants are pursuing, advice on any problems they&rsquo;re facing and solutions they are developing to those issues.</li></ul>

Managing AI Risk: A Case Study

<p>Jake Williams (aka MalwareJake) is a seasoned security researcher with decades of experience in  technology and security. Jake is a former startup founder, former senior SANS instructor and course author, and an intelligence community and military veteran. He loves forensics, incident response, cyber threat intelligence and offensive methodologies. Today, Jake is an IANS faculty member, an independent security consultant, and is performing security-focused research to benefit the broader community. He has had the honor of twice winning the DoD Cyber Crime Center (DC3) annual digital forensics challenge. You may also know Jake from one of his many conference talks, webcasts, media appearances or his postings&nbsp;about cybersecurity.</p>

Check in at the registration desk, grab an agenda to plan out your day, fuel up with some breakfast, and head over to our morning Keynote session!

Registration & Breakfast

Lunch

In "An Era of Flux: How to Combat a Changing Industry," we will dive into the dynamic shifts occurring within the cybersecurity landscape, where evolving threats demand new approaches and strategies. As cyber attackers continuously refine their tactics, exploiting both technological advancements and human vulnerabilities, the cybersecurity industry faces the challenge of staying ahead in an ever-changing environment. This talk will explore how the industry itself is transforming, from the adoption of more proactive and adaptive defenses to the need for greater collaboration and innovation. Attendees will gain a deeper understanding of how to navigate these changes and effectively combat the emerging threats that define this era of flux.

Keynote: An Era of Flux: How to Combat a Changing Industry

<p>Dave is the Founder and Owner of TrustedSec, an information security consulting firm, and Binary Defense, a Managed Security Service Provider (MSSP) that detects attackers early to prevent large-scale invasions. In addition to creating several widely
    popular open-source tools, including 'The Social-Engineer Toolkit' (SET), PenTesters Framework (PTF), and Artillery. David has also released security advisories, including zero-days, with a focus on security research. </p><br><p>Prior to his work in the private sector, Dave served in the United States Marine Corps (USMC), focusing on cyber warfare and forensics analysis activities, including two tours to Iraq. He also served on the board of directors for (ISC)2, which is one
    of the largest security collectives and offers certifications such as the CISSP.
</p>

<div data-block-id="block-7236aa98-5cf2-4956-84ea-9d0962e38ddf"><p>The scope of the CISO role is expanding, often incorporating ownership of digital risk and, as a result, all things AI. The evolution is natural, but it creates a situation in which CISOs must negotiate complex conversations that skirt the boundaries of traditional cyber initiatives. Mitigating bias risk and creating transparency within Gen AI systems is a prime example of this trend. In this session, IANS Faculty member Summer Fowler will provide guidance on how to put the right guardrails around Gen AI to limit the possibility of bias while understanding what risk the org is accepting. She&rsquo;ll cover:</p><ul><li>How to discuss AI bias in a way that engages the board in thoughtful conversations to govern the org&rsquo;s risk profile.</li><li>Questions to ask to properly scope Gen AI projects so stakeholders can understand and accept the potential for bias in a given application.</li><li>Creating data flow maps to understand what information is influencing AI decisions and reasonably vet that choices are made without unacceptable bias.</li></ul></div>

Avoiding Bias Risk In Gen AI Initiatives

<div><p>Summer is a three-time CISO in the autonomous vehicle industry currently at Torc Robotics, which specializes in AI software for long-haul trucking. She is also a faculty member at Carnegie Mellon University where she teaches a graduate course in cybersecurity
        policy and multiple courses on cybersecurity metrics and product&nbsp;cybersecurity for executive education programs. In addition, Summer serves on the board of directors for Brentwood Bank,&nbsp;a regional&nbsp;bank in Pittsburgh, PA. She is
        also an active&nbsp;board&nbsp;member for the Forte Group, an advocacy and education non-profit focused on amplifying women in technology,&nbsp;cybersecurity, and privacy. Summer is often requested to speak at conferences and events, and she has
        provided expert testimony on cybersecurity risk in the US Congress.<br><br></p><p>Prior to her role at Torc Robotics, Summer worked at Motional and Argo AI, both AI companies focused on robo-taxi technology. She also led cybersecurity&nbsp;risk and resilience at Carnegie Mellon University's CERT program and Johns Hopkins University's
        Applied Physics Lab. Summer started her career as a software engineer at Northrop Grumman Corporation after receiving her MS and BS in Computer Science from the University of Pittsburgh.<br></p></div>

2024 Atlanta CISO Roundtable Agenda

2024 CISO Roundtables

a13e2160-4385-49af-8378-332206e680e2,e6f66081-257d-41fa-8a15-03bdaa66f657

Attendee Contact

<p>At IANS CISO Roundtables, we bring together CISOs, IANS Faculty members and expert practitioners to talk about the critical issues shaping the security industry. We focus on helping security leaders become stronger business risk executives through a blend of expert and peer-driven insights.</p><p>Our Roundtables feature a blend of opportunities to get advice from industry leaders, discuss your specific problems with peers in a confidential setting and gain access to benchmarking data to inform your program’s strategy. Join a Roundtable for a taste of what the IANS community has to offer.</p>

General Information

Register Now

This one-day roundtable is designed exclusively for CISOs and senior level information security executives to learn and share insights in a confidential setting.

CISO Roundtable

At IANS CISO Roundtables, we bring together CISOs, IANS Faculty members and expert practitioners to talk about the critical issues shaping the security industry.

2024 Atlanta CISO Roundtable

Atlanta Marriott Buckhead Hotel & Conference Center

Decision Support

Consulting

Professional Development

Daily Dive Trial

Services

Column 1

Events

Forums

CISO Roundtables

Symposiums

Webinars

Column 2

Faculty Overview

Faculty Directory

Faculty

Column 3

Blogs

Insights

Tools & Guides

Podcasts

Resources

Column 4

About Us

Press Releases

Careers

Why IANS

Column 5

Ask an Expert

Executive Communications

Vendor Assessment Community

CISO Inquiry

Tech Briefings

Tools & Templates

Content Aggregator

Privacy Operations

Penetration Testing

Security Program Assessment

Red and Purple Teaming

Cloud Security Assessments

Online Training

Executive Competencies

Learn how data within the Microsoft environment will be available through Copilot and how to secure it

Microsoft 365 Copilot

Faculty Links

Benchmark Survey

Staff Survey

Resources Links

Why IANS Links

My Progress

My Individual Development Plan

Video Insights

Learning Pathways

Upcoming Live Sessions

Recorded Live Sessions

Live Online Training

Online Training Library

Comp & Budget

Take the Survey

Reports

Survey Visualization Tool

Daily Dive

Incident Command Center

Resource Center

All Content

Privacy Operational Framework

Cheat Sheets

Toolkits

Briefings

Slides

Who We Are

Our Story

Contact Us

What We Do

InfoSec-Specific Executive Development for CISOs and Aspiring Security Leaders.

Live Faculty-led instruction and interactive labs to build you and your team"s InfoSec skills.

2024 Atlanta

CISO Roundtable

Contact us at:

Contact us at: