The new year is around the corner and the time has come to think about emerging priorities within your cyber agenda. In this panel discussion, IANS Faculty members will sift through the trending topics for 2025 to highlight three critical issues they believe CISOs should be planning around for the coming year. They&rsquo;ll then provide guidance on the key questions to ask to guide your strategy and initial tactical steps to take to get a head start for 2025.

Looking Ahead to 2025: What Should CISOs Be Thinking About Now?

<p>Aaron is a three-decade veteran of the cybersecurity community, having worked on projects covering every aspect of the industry, from helping build security technologies while at Microsoft to his work on offensive cyber projects for the U.S. government. He has spent the last 15 years on a series of cybersecurity startups, building technologies and developing companies to help teams solve some of the toughest cybersecurity problems.</p>

<p>Dave is the founder and principal consultant with Voodoo Security, an 
information security consulting firm with broad expertise. He is also a 
senior instructor, analyst and course author for the SANS Institute and
 a VMware vExpert with extensive experience designing and configuring 
secure virtualized infrastructures. In addition, Dave has served as 
co-chair of the Cloud Security Alliance (CSA) Top Threats Working Group 
and founded the CSA Atlanta Chapter. Dave has consulted with hundreds of
 organizations in the areas of security, regulatory compliance, network 
architecture and engineering. He has also worked as a security 
architect, analyst and manager for several Fortune 500 companies.
</p>

<div data-block-id="block-d17ffa10-9652-4b77-bbad-f7701e2c7a65">Gen AI risk is an increasingly vital conversation in the board room. This session will take a case study approach to tangibly describe the real-world risks of using Gen AI. IANS Faculty Jake Williams will:</div><ul><li>Walk through a Gen AI project, talking through risk pain points and how they were resolved.</li><li>Provide in-depth analysis of lessons learned as a result of the project.</li><li>Lead a discussion on AI projects participants are pursuing, advice on any problems they&rsquo;re facing and solutions they are developing to those issues.</li></ul>

Managing AI Risk: A Case Study

<p>Jake Williams (aka MalwareJake) is a seasoned security researcher with decades of experience in  technology and security. Jake is a former startup founder, former senior SANS instructor and course author, and an intelligence community and military veteran. He loves forensics, incident response, cyber threat intelligence and offensive methodologies. Today, Jake is an IANS faculty member, an independent security consultant, and is performing security-focused research to benefit the broader community. He has had the honor of twice winning the DoD Cyber Crime Center (DC3) annual digital forensics challenge. You may also know Jake from one of his many conference talks, webcasts, media appearances or his postings&nbsp;about cybersecurity.</p>

CISO Roundtable Opening Remarks and Introductions

<div data-block-id="block-7ccaaa77-b67d-414f-97de-ed362d78542f"><p>Each year, IANS and Artico Search team up to survey CISOs about their compensation, budgets and perception of their role in the organization. Pulling from that data, Steve Martano, IANS Faculty member and partner for Artico Search&rsquo;s cyber division, and Nick Kakolowski, IANS Senior Research Director, will discuss ways CISOs can use benchmarking data for career planning and development. Specifically, we&rsquo;ll cover:</p><ul><li>Multi-year compensation trends, how CISOs can pinpoint their current position in the industry and how to identify realistic paths to advance in the role.</li><li>Data on the scope of the CISO role and background of CISOs to help you identify target areas for skills development as you progress in your career.</li><li>Observations from the hiring market and advice on how to navigate career-related conversations, whether you are considering a move or looking to grow within your current org.</li></ul></div>

Benchmarking to Develop Your Career

<p>Steve is a partner in Artico Search’s cybersecurity practice. He is an expert in security executive recruiting and compensation focused on recruiting best-in-class CISOs and their teams across various industries. He leads strategic partnerships
and initiatives including Artico’s annual CISO compensation &amp; budget survey conducted in collaboration with IANS. <br><br>Prior to Artico, Steve served in Caldwell Partner's cybersecurity practice and at Russell Reynolds associates.</p>

Solution Provider Case Study

Solution Provider Case Study 2

Lunch

During this time attendees are encouraged to join the Forum Tabletop Break that provides an opportunity to connect with solution providers and explore emerging technologies. Stretch your legs and network with your peers over snacks and coffee.

Morning Break

IANS Welcome & Keynote

Check in at the registration desk, grab an agenda to plan out your day, fuel up with some breakfast, and head over to our morning Keynote session!

Registration & Breakfast

Solution Provider Case Study 3

At the conclusion of the CISO Roundtable you are welcomed to join the remaining Forum Faculty Sessions from&nbsp;3:55-4:35 and Networking Reception from 4:35-5:30.&nbsp;

Closing Remarks

Throughout the roundtable, three solution providers will provide a rundown of how they deliver value. The feedback session is a discussion of the solution providers without the vendor present. It&rsquo;s an opportunity to get inside intelligence on vendors you may be considering for your environment.

Solution Provider Feedback Session

Solution Provider Case Study 1

<div data-block-id="block-2a824541-b6e5-434a-889e-ba094b004c17"><p>As cyber risk gets more board-level scrutiny, becoming more comfortable and effective in the board room is critical. In this workshop, IANS Faculty Bryson Bort will lead participants in a set of hands-on exercises to help them plan for their next board briefing. Participants will work together in small groups to develop board talking points, including:</p><ul><li>Key metrics to tie cyber to business goals and help the board govern the org&rsquo;s digital risk posture.</li><li>Critical cyber initiatives for the year and why those plans are valuable to the broader org.</li><li>Updates on projects in motion &ndash; in this exercise, using an OT use case to illustrate effective communication methods.</li><li>Expect to build a sample briefing with a team of CISOs and present it to get feedback from your peers.</li></ul></div>

Workshop: Building Your Next Cyber Briefing for the Board

Bryson is the Founder of SCYTHE, a start-up building a next generation attack emulation platform, and GRIMM, a cybersecurity consultancy, and Co-Founder of the ICS Village, a non-profit advancing awareness of industrial control system security. He is a Senior Fellow at the National Security Institute. As a U.S. Army Officer, he served as a Battle Captain and Brigade Engineering Officer in support of Operation Iraqi Freedom before leaving the Army as a Captain. In 2023, Bryson earned Innovator of the Year at the SANS Difference Makers Awards. He has also been recognized as one of the Top 50 in Cyber by Business Insider, Security Executive Finalist of the Year by SC Media, and a Tech Titan in Washington DC.

<div data-block-id="block-ff0d558b-3af0-4ba3-9863-7a1bd1c5523d"><p>The EU&rsquo;s regulatory focus on resiliency is expected to have a far-reaching impact on how business leaders think about their cyber programs. In this session, IANS Faculty member Tarah Wheeler will provide a rundown of what U.S. CISOs should know about the EU&rsquo;s DORA and NIS2 regulations. She&rsquo;ll:</p><ul><li>Provide a strategic overview of the critical elements of these resiliency initiatives, zooming in on measures likely to become compliance reality in the U.S.</li><li>Offer tactical guidance on initial steps to take and conversations to have with business leaders in response to these regulations.</li><li>Lead a discussion on how CISOs can guide the conversation around risks that impact the organization&rsquo;s resilience.</li></ul></div>

DORA and NIS2: What U.S. CISOs Can Learn From the EU’s Resiliency Efforts

<p>&nbsp;Tarah is the Founder and CEO of the cybersecurity compliance company Red Queen Dynamics. She also serves as the Senior Fellow for Global Cyber Policy at Council on Foreign Relations.&nbsp; Tarah has spoken and testified on information security at the United States Senate, European Union and at multiple governmental and industry conferences.<br>Prior to launching Red Queen Dynamics, Tarah was the Head of Offensive Security &amp; Technical Data Privacy at Splunk and Senior Director of Engineering and Principal Security Advocate at Symantec Website Security.<br></p>

2024 Boston CISO Roundtable Agenda

2024 CISO Roundtables

a13e2160-4385-49af-8378-332206e680e2,e6f66081-257d-41fa-8a15-03bdaa66f657

Attendee Contact

<p>At IANS CISO Roundtables, we bring together CISOs, IANS Faculty members and expert practitioners to talk about the critical issues shaping the security industry. We focus on helping security leaders become stronger business risk executives through a blend of expert and peer-driven insights.</p><p>Our Roundtables feature a blend of opportunities to get advice from industry leaders, discuss your specific problems with peers in a confidential setting and gain access to benchmarking data to inform your program’s strategy. Join a Roundtable for a taste of what the IANS community has to offer.</p>

General Information

Register Now

This one-day roundtable is designed exclusively for CISOs and senior level information security executives to learn and share insights in a confidential setting.

CISO Roundtable

At IANS CISO Roundtables, we bring together CISOs, IANS Faculty members and expert practitioners to talk about the critical issues shaping the security industry.

2024 Boston CISO Roundtable

Omni Boston Hotel at the Seaport

Decision Support

Consulting

Professional Development

Daily Dive Trial

Services

Column 1

Events

Forums

CISO Roundtables

Symposiums

Webinars

Sponsor a Forum

Column 2

Faculty Overview

Faculty Directory

Faculty

Column 3

Blogs

Insights

Tools & Guides

Podcasts

Resources

Column 4

About Us

Press Releases

Careers

Why IANS

Column 5

Ask an Expert

Executive Communications

Vendor Assessment Community

CISO Inquiry

Tech Briefings

Tools & Templates

Content Aggregator

Privacy Operations

Penetration Testing

Security Program Assessment

Red and Purple Teaming

Cloud Security Assessments

Online Training

Executive Competencies

Learn how data within the Microsoft environment will be available through Copilot and how to secure it

Microsoft 365 Copilot

Faculty Links

Benchmark Survey

Staff Survey

Resources Links

Why IANS Links

My Progress

My Individual Development Plan

Video Insights

Learning Pathways

Upcoming Live Sessions

Recorded Live Sessions

Live Online Training

Online Training Library

Comp & Budget

Take the Survey

Reports

Survey Visualization Tool

Daily Dive

Incident Command Center

Resource Center

All Content

Privacy Operational Framework

Cheat Sheets

Toolkits

Briefings

Slides

Who We Are

Our Story

Contact Us

What We Do

InfoSec-Specific Executive Development for CISOs and Aspiring Security Leaders.

Live Faculty-led instruction and interactive labs to build you and your team"s InfoSec skills.

2024 Boston

CISO Roundtable

Contact us at:

Contact us at: