The SAI Global channel features presentations with Integrated Risk Management thought leaders, customers, analysts and leading solution experts. Our IRM solutions are a combination of leading capabilities, services and advisory offerings that operate across the entire risk lifecycle allowing businesses to focus elsewhere. Together, these tools and knowledge enable clients to develop a holistic, integrated view of risk.

CISO’s in all industry verticals today are being asked to address their board of directors, and rightly so as cybersecurity should be a top 5 risk in any organization. What do you say? More importantly, what do they want to hear? This presentation leverages an analysis by the presenter of the many ideas promoted by large consulting firms to determine what is important for effective board interaction. 

Communicating with the board is a leadership style that will vary amongst CISOs. The “Style” factor is one of the ‘7-S Framework Applied to Cybersecurity Leadership’ factors (strategy, structure, systems, staff, skills, style, shared values) as detailed in the new book CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers available at www.amazon.com/author/toddfitzgerald . This session will explore the Style component for the CISO to develop a successful program.

40 Ways for The CISO to Talk with The Board of Directors

The CISO’s role to protect information assets is critical to the organization and must operate as a business partner. As any good business partner, the CISO must reflect on the past year, examine trends, emerging technologies, organizational maturity and business imperatives to develop appropriate goals for the coming year. Critical to this is understanding the CISO leadership trends and how to be an even more effective CISO in the years ahead. 

This session uses the 7-S framework and examines one key trend in each of the 7 areas that the CISO should be aware of for 2020. The ‘7-S Framework Applied to Cybersecurity Leadership’ factors (strategy, structure, systems, staff, skills, style, shared values) are detailed in the new book CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers available at www.amazon.com/author/toddfitzgerald . This session will explore each of these factors and their meaning in 2020 for the CISO to develop a successful program.

7 Key 2020 CISO Leadership Projections

Cultural values are the glue that explains what the organization really cares about. The CISO has a responsibility to understand and promote privacy and cybersecurity concepts, laws and regulations, and meaningful policies to enable the organization to protect the information assets. This session will examine the privacy and data protection concepts every CISO must know, laws and regulations, meaningful policies, as well as those things we do that eat into our cultural ability to be successful. 

The “Shared Values” factor is one of the ‘7-S Framework Applied to Cybersecurity Leadership’ factors (strategy, structure, systems, staff, skills, style, shared values) as detailed in the new book CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers available at www.amazon.com/author/toddfitzgerald . This session will explore the Shared Values component for the CISO to develop a successful program.

Organizational Cultural Values: Privacy, Laws and Regulations, and Policies

Recent headlines:

• “Internal audit report finds issues in University of Iowa Department of Public Safety Information Technology”

• “Renault uncovers €11mn in questionable expenses linked to ex-CEO Ghosn”

• Audit: TVA Failed to Meet Federal Cybersecurity Standards”

There’s one common thread here: Internal auditors are knocking it out of the park.

Behind the success of these Internal Auditors are a set of best practices you need to hear about from the renowned Internal Auditor, Norman Marks. 

Are you willing to pony up? Join us for a live webinar with Marks on July 2 at 2:00pm EDT.

The Core Principles for Effective Internal Auditing

Have you noticed lately that your InfoSec team is made up of Gen Xers, Millennials and Baby Boomers? 

Perhaps you’re finding that your co-workers who are in their 50s on up are more collaborative. And those younger are more opinionated, more likely to take risks and make quicker decisions.

Don’t just shake your head yes. 

It’s not enough to simply co-exist with your colleagues, direct reports or managers. Understanding the multi-generational workplace is a critical factor to meet the daily challenges like discovering the weak links in your supply chain or identifying potential data breaches.

Stick around for our continuing CISO Leadership Series featuring Todd Fitzgerald, veteran InfoSec practitioner and CISO, who will debunk misconceptions you may have about generations, explore the commonalities and begin to formulate how you might approach one another to affect a more powerful team. 

No secret sauce. Just common sense.

Yikes! You're Surrounded by a Multi-Generational Workforce

Some folks very successfully use “the dark side of the force” to further InfoSec practices as ethical hackers.

And we’ve lined up a panel of three of the world’s leading--and coolest--white hat hackers out there:

Vinny Troia, Joshua Crumbaugh and Alex Heid.

Over the next couple of weeks we’re going to introduce you to our high-profile digital investigators, tell you some of their mind-bending stories and show you why you should carve out time in your calendar for this event.

Their stories are going to reveal what it’s like behind “Darth Vader’s mask”--an exclusive peek inside the mind of an ethical hacker.
The webinar will go live on May 9 at 2 pm EDT. Take action now to register.

Only you could be so bold.

White Hat Hackers: Infiltrators for the Good

Technology risk. 

The meaning of those words is broad. 

And means something different to different IT Security folks. 

But there’s one common thread: taking a business-first approach to technology risk. If this is something you’re struggling with, we’d like to have you join us for a live webinar on April 30 at 2:00pm EDT with Norman Marks leading the discussion.

Technology risk must be an ongoing business conversation. Are you in?

Norman Marks: Making Business Sense of Technology Risk

Listen to this webinar as we explore how an effective security policy can prevent your workforce from falling foul of attacks from cyber criminals.

A well-developed security policy is a powerful risk mitigation tool. As the media reminds us every day, it's often not IT systems, but people, that fall victim to hacking attempts. Regardless of company size, a security policy can establish actionable ways for your organization to foster and enforce a workforce culture of security awareness.

To help information security leaders build an effective security policy or fine-tune an existing program, SAI Global has partnered with security expert Susan Morrow, Head of Research & Development at Avoco Secure, to discuss the critical steps you should take to develop your security policy. 

Susan will share: 

• The risks of not having a security policy 
• The value of going beyond off-the-shelf policy solutions 
• Critical steps in policy development 
• The effectiveness of a global policy vs. department-specific policies 
• Suggestions on policy content, scope and implementation

Actionable Security Policies for Cyber Defense

With email providing the entry point for 91% of global cyber-attacks, a sustainable information security and data privacy risk management program needs to empower employees and third-party vendors to detect, avoid and report security risks and phishing attacks. 

Consider account verification emails, DocuSign requests, cloud file sharing alerts and delivery notifications. These asks could actually be a phishing attack in disguise. 

Learn to spot the signs and how to enable your team to be the first line of defense. 

Join SAI Global and the InfoSec Institute as Mike Nobers, Director of Channel InfoSec Institute discusses the critical steps in addressing phishing in the workplace. Exploring how software can help organizations identify risk and phish-susceptible individuals with market-leading risk intelligence capabilities that can help ensure a security culture. 

Topics to be covered include:

• Why Phishing attacks are so successful 
• How to approach team members with awareness training 
• What technology measures organizations can take to protect themselves 
• Where the threat landscape is heading

Phishing: The Security Threat You Can't Ignore

Are you continuously refining many of your business processes and procedures just to get your job done? What if there was an easier way to retool some of those broken methods and land on processes that make better sense?

Tune in for our 4th live webinar in our CISO Leadership Series with Todd Fitzgerald, veteran CISO, April 17 at 2:00pm EDT. Fitzgerald will talk us through the ‘systems’ area of the McKinsey 7S diagnostic model which is widely used by academics and practitioners, and remains one of the most popular strategic planning tools

If you’re thinking that your business processes and procedures are ineffective or need improvement, take a moment to register for this enlightening presentation. 

You just might get by without the shiny object.

CISO Leadership Series: Getting the Job Done without the Shiny Object

Amid the common definition of the phrase ‘risk appetite’, GRC trailblazer Norman Marks, debunks its conventional meaning during a live talk on Tuesday, March 26, 2019 at 2:00pm EDT. Marks will bring you a fresh perspective on recognizing that no organization will succeed if it doesn’t take a risk.

So let’s stop talking about managing and mitigating risk. Let’s talk about what might happen.

Norman Marks: The Concept of Risk Appetite is Flawed

Think blue skies…if you could select your supervisor, who would you it be? Your CEO, CTO, CIO? On a live session, March 13 at 2:00pm EST, accomplished veteran CISO, Todd Fitzgerald, will help you understand how your role as an InfoSec practitioner is viewed within your organization based on who you report to. 

By the way, your horoscope for today is to register  for this intriguing conversation.

CISO Leadership Series: Who you report to could have unintended consequences

Have you noticed that the cost and scope of the SOX compliance program keeps multiplying? What’s up with that?

Our leading GRC authority, Norman Marks, will explore the causes of this emerging trend and more during a live talk on Tuesday, February 6, 2019 at 2:00pm EST. Marks’ risk-based, top-down approach to SOX compliance just might surprise you enough to take action.

No matter how you put your sox on, you’ll want to put this SOX seminar on your calendar

Norman Marks: What's Right and What's Wrong with SOX?

Remember when there was a lot of ruckus about robots taking over people’s jobs? There’s no immediate cause for you to worry about that, but we do know there’s a widespread concern over the shortage of qualified InfoSec talent, especially in the healthcare industry. 

We have a solution that we think can help. We’ve teamed up with Meditology Services LLC, a professional services company with an exclusive focus on healthcare IT, to bring you a panel of expert InfoSec practitioners on a live webinar February 6 at 2pm EST. This user group will talk about everything from Digital Risk automation tools to hiring and recruiting the best talent. 

Start your own trend…register now for this timely conversation.

Customer Panelists: Andrew Seward, CISO, Elliot Health System; John Abella, IT Security and Enterprise Architecture, Main Line Health; Charles (Chuck) Goff, Cyber Security Program Manager, Information Services, Dartmouth Hitchcock Medical Center

Are Robots Invading Your Space? Healthcare InfoSec Staffing

What’s your strategy for protecting your network systems? Whether you’ve just redefined your cyber strategy, rethinking your approach or needing to develop a program, tune in for the 2nd live webinar in our CISO Leadership Series with Todd Fitzgerald, veteran CISO, January 30 at 2:00pm EST.

Fitzgerald will talk through the 7S diagnostic model involving strategy, structure, systems, staff, skills, style and shared values. The 7S Framework is mainly used to trace performance problems in an organization for the purpose of changing or improving these areas.   

Only increased awareness and education can strengthen your cyber program. If you’re thinking that your information security approach is insufficient or needs improvement, take a moment to register for this instructional presentation.

6 Proactive Cybersecurity Precautions to Take Now

Norman Marks may not have coined the term, Governance, Risk and Compliance—but he’s one heck of a GRC giant. During a live chat on Tuesday, January 22, 2019 at 2:00pm EST, Marks will share his wisdom, what makes him tick, why he’s been so successful, what failures he’s had to overcome and his forecast on the future of GRC.

Sneak peek! One of the quirky questions we’ll be asking Marks is: if you were given a 30-second ad slot promoting IRM (no products) during the Super Bowl, what would it say?

Find out if Marks is optimistic about the future of IRM. It’ll be a smart start to the new year.

A Conversation with Norman Marks, GRC Giant

The financial services industry is increasingly impacted with new regulations, as well as the growing risk from hacktivists, nation states, and other cyber criminals. As the types of cyber threats rapidly grow and change, cybersecurity regulations are trying to keep up. 

Join our live webinar with Paul Ferrillo, Attorney and Shareholder with Greenberg, Traurig LLP as he reviews the changing regulatory landscape and offers insights on how to address it.

Ferrillo will review:

•  Applicable Federal Cybersecurity Guidelines
•  NIST Cybersecurity Framework
•  State Cybersecurity Guidelines in NY and California
•  More regulation to come
•  How GDPR factors in

Regulatory Complexity in Financial Services Cybersecurity

You have been a techie and developed great security skills. Now you want to move into management, should you? Will you be happy there? How will your life change? Is this a good move? How will you get there? This session will examine what this career choice really means.

The session will explore the differences between operating as a technical staff vs the functions and challenges a manager faces. This will discuss the competencies required and will help those trying to decide upon this career choice. The presenter has held Global CISO/security leadership roles across multiple organizations, after starting out as a techie computer programmer and then DBA. 

The “Skills” factor is one of the ‘7-S Framework Applied to Cybersecurity Leadership’ factors (strategy, structure, systems, staff, skills, style, shared values) as detailed in the new book CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers available at www.amazon.com/author/toddfitzgerald . This session will explore the Skills component for the CISO to develop a successful program.

Are CISO Skills Different from Techie Security Skills?

Presented by

About this talk

More from this channel