Name: 2024 Annual Membership Meeting
Start: 2024-09-26T17:00:00Z
End: 2024-09-26T17:00:59.000Z
Location: BrightTALK
Rating: 4.5

ISSA is the community of choice for international cybersecurity professionals dedicated to advancing individual growth, managing technology risk and protecting critical information and infrastructure.

Join us for an exclusive webinar led by ProcessUnity's Chief Trust Officer Dave Stapleton as we dive into how ProcessUnity transforms Third-Party Risk Management (TPRM) with AI. Together, we’ll explore the evolution of TPRM - past, present, and future - to better understand the role AI plays in shaping the field. See how tools such as predictive analytics and automated evidence reviews help you automate tedious assessment work, while future capabilities such as agentic AI will monitor and mitigate risks on your behalf. Leave with ideas from a seasoned TPRM and security expert on how to incorporate AI into your program and elevate your role as a subject-matter expert overseeing your organization's risk management strategy.
Key Takeaways:
  • Explore the innovative AI advancements and their use cases driving the future of TPRM.
  • Discover how to responsibly integrate and scale AI across your vendor portfolio.
  • Learn how AI integration is redefining the role of risk analysts, empowering them with deeper insights and expertise.
  • Communicate the ROI of AI in TPRM with important metrics to track

Don’t miss this opportunity to prepare your organization for the future of TPRM and stay ahead with AI as your second-in-command.

No Longer Optional: The Future of AI in TPRM

From Imposter to Empowered is a powerful, engaging class designed to help you break free from self doubt and step boldly into your strengths. If you've ever felt like a fraud despite your accomplishments, you're not alone and you're not stuck. This session offers practical tools, mindset shifts, and real talk to help you recognize your value, reframe limiting beliefs, and lead with confidence. Walk away feeling seen, supported, and ready to own your worth in every room you walk into.

From Imposter to Empowered

Program:
Time (CEST – EU) Time (ET – US) Speaker Title
3:00 PM CEST / 9:00 AM ET - Jimmy Sanders: Intro
3:10 PM CEST / 9:10 AM ET - Filipi Pires: Identity at the Core: Dissecting Malicious PDFs to Prevent Data Threats
4:05 PM CEST / 10:05 AM ET - Francesco Chiarini & Patrick Lechner: Cyber Resilience: From Assessment to Action Leveraging The CR-CMM Toolkit
5:00 PM CEST / 11:00 AM ET - Mario Demarillas: Open and Exposed: Protecting Primary and Secondary Schools Against Social Engineering Attacks
7:00 PM CEST / 1:00 PM ET - Mathieu Gorge: Integrated Risk Management

ISSA International Conference (Virtual)

Your vote is your voice—make it count by getting to know the candidates firsthand.

Watch the replay of the live webinar where you’ll meet the 2025 candidates and hear directly about their goals, vision, and priorities. This is your chance to ask questions, engage in meaningful dialogue, and understand how each candidate plans to represent our community.

Informed voters build stronger communities. Take this opportunity to learn, ask, and vote with confidence.

ISSA International Board Elections: Meet the Candidates Webinar

The role of the CISO has never been more vital in the corporate boardroom. Bob Zukis is the world’s leading advocate for director cyber expertise in the boardroom and founded DDN in 2017 to strengthen the boardroom as a key control in the cybersecurity system and create the practice and professions of digital and cybersecurity governance.  Join us to engage with Bob and to discuss key and developing boardroom policies and practices that will help cybersecurity leaders step up to their boardroom leadership moment effectively, and understand what it takes to become a corporate director.

Webinar to Discuss Key and Developing Boardroom Policies and Practices

AI is transforming how organizations use data—but it’s also reshaping the security landscape, exposing critical gaps in traditional controls. As AI adoption accelerates, security leaders must rethink their approach to data security, privacy, and compliance to stay ahead of emerging threats. 

Join this session to explore the evolving nexus of data security and AI risk. Learn why conventional security strategies fall short and discover the next generation of security controls designed for an AI-driven world. 

Key Takeaways: 
  ●   New Security Demands: Why AI-driven data usage challenges existing security frameworks and what’s needed to adapt. 
  ●   Regulatory & Compliance Pressures: How evolving privacy and security mandates impact AI governance. 
  ●   AI Risk & Data Protection: Best practices for securing sensitive data in AI models and mitigating exposure risks. 
  ●   Next-Gen Security Controls: How to implement AI-aware security measures, including real-time data monitoring and dynamic access controls. 
  ●   Actionable Strategies for Security Leaders: Practical steps to future-proof data security programs in the AI era. 

This isn’t just another AI session. It’s a roadmap for security leaders navigating the complexities of AI-driven data security.

Beyond the Buzz: Data Security Controls for the AI Era

The rapid adoption of AI is introducing serious new risks and vulnerabilities that will not be caught and/or remedied by traditional risk management approaches. This presentation will highlight a number of those new risk and vulnerability areas, and discuss the prudent ways that we might go about performing a better risk assessment process, so as to develop contingency plans for the inevitable failures and damages sustained as a result of this very rapid adoption process. A sample of recent legal cases related to these new risks and vulnerabilities will be covered, with an emphasis on what can be done, so as to prevent similar problems at the viewer's organization.

Safety Nets for Artificial Intelligence Risk Management Failures

The work never ends. Every year, we onboard more third parties. And every year, our assessment workload gets worse. More resources to help? Not going to happen. Sound familiar? You’re not alone. We have been at this process for years, but it continues to get worse for your team and the people in your company that rely on your third parties.

It doesn't have to be that way. It's time the flip the script and cut back on assessment questionnaires.
Join us for a live webcast on March 26th at 1PM ET and learn how the newest risk exchange models are eliminating 80% of questionnaire requests with data.

Our team of experts will outline how to:
• Instantly perform inherent risk analysis on your entire vendor portfolio
• Incorporate real-time risk  data into your process to reduce  questionnaire requests
• Map your questionnaire and controls to industry-standard  frameworks or threat profiles to get the information you need with fewer questions
• Access  assessment data on large, hard-to-assess third parties that don't respond to you
• Monitor 100% of your portfolio -- not just your critical vendors

TPRM doesn't have to be the most painful process in your company. Join us and start your program's evolution.

Get Off the Assessment Treadmill. Take a Data-First, Questionnaire-Second Approach to TPRM

Existing risk management policies, and the related business processes, which may have been appropriate for the traditional information technology environment, will not be workable in the AI environment. In this presentation, we’ll discuss what’s markedly different between the traditional information technology risk management environment, and the new AI risk management environment. For example, there is a risk of model stealing with publicly facing AI systems, but no such risk is found in traditional publicly facing systems. Likewise, the result provided by a certain query submitted to a Generative Artificial Intelligence (GAI) system may not be the same from day to day, but no such phenomenon is present with traditional information systems. Similarly, the great power of AI systems can be used to overcome traditional privacy-protection mechanisms such as anonymization, and this has not been previously encountered with traditional information systems. Also covered in this presentation will be suggested managerial and technical responses to these differences, such as an AI Acceptable Use Policy and an AI Life Cycle Process. Some recent legal developments in the AI risk management area will also be briefly covered.

Why AI Needs Its Own Risk Management Policies and Processes

GDPR became one of the first forcing functions to get teams to implement baseline engineering policies within their organization(s), but we continue to see organizations paying fines. Validating external claims made by organizations and helping to evolve policies requires a robust cultural shift. In this talk we'll discuss examples of privacy policy converted to engineering verification scenarios to help engineers or privacy champions embed privacy policy verification(s) within product cycles so policies stay current.

Privacy for the People by the People

Kick-off (or refresh) your mentorship journey with the ISSA Mentorship Program, designed for cybersecurity professionals looking to grow and connect in meaningful ways. Pete Schramm will share how an agile approach to mentorship can help you plan your career, build a Personal Board of Advisors (multiple mentors), and strengthen relationships beyond "just work." Learn what it truly means to be an effective mentor or mentee, how to use career mapping to guide your conversations, and how strong connections within your organization can reduce internal threats by fostering trust and collaboration. Invest in your career and community—this is mentorship redefined for cybersecurity professionals!

Creating & Managing an Effective Mentorship Program, Methods & Best Practices to Consider

This presentation will discuss how to ensure your company has AI policies and plans in place based on industry best practices and applicable regulations.  It will take into consideration the developing frameworks and other quickly evolving regulations. We will discuss the prioritization of ethical and legal use in AI software as well as how to work with relevant stakeholders to understand business considerations and risks.  We will also show how AI can present real opportunities for cybersecurity and why you shouldn’t be afraid to implement it.

A CISO Guide to AI and Privacy

Privacy and security are distinct yet equally important disciplines, each addressing unique challenges. This session will provide a brief overview of what privacy is, its key differences from security, and why these teams must work together. Through practical insights, you’ll learn how collaboration can strengthen compliance, reduce risks, and build trust across your organization.

Privacy & Security: Different But Equal and Why They Need to Work Together

According to recent research, a staggering 60% of breaches happen because of vulnerabilities that go unpatched—even when a fix is available. As the volume of vulnerabilities increases, capacity to address them hasn’t kept up, security teams are often overwhelmed and don’t know where to start. To address this gap, we need a better way to evaluate and prioritize vulnerabilities and the risks they pose to our organizations.
In this webinar, Justin Scarpaci, Technical Strategist at Sevco Security, will provide a framework for assessing risk to prioritize the most critical vulnerabilities for the most effective remediation. In this webinar, he’ll discuss:
  ● Why the first step is to understand where your security tools are – and aren’t – deployed
  ● The limitations around existing vulnerability scoring systems like CVSS
  ● How to better assess likelihood of exploit alongside org-specific intelligence like business impact provides a more complete risk assessment
  ● What signals can be used to determine vulnerability likelihood and business impact
Attendees will leave with practical approaches to apply within their organizations.

Close the Vulnerability Gap: Using Better Intelligence for Better Prioritization

Join us for an engaging session hosted by the ISSA International Apprenticeship, Internships, Mentorship (AIM) Comittee, where we dive into the latest insights from our recent infosec professional study. As the cybersecurity landscape intensifies, professionals face mounting challenges, from resource constraints and evolving skill requirements to balancing time and mitigating real threats. Our research highlights the shared pain points and needs of today’s cyber workforce. 

Guided by the AIM Program’s mission, this webinar will also highlight efforts to bolster the cybersecurity talent pipeline, providing access to quality apprenticeship, internship, and mentorship opportunities. Walk away with actionable data, connections, and a fresh perspective on shaping the future of the cybersecurity workforce.

Navigating Workforce Challenges: Perspectives and Insights of Information Security Professionals

In recent years privacy regulation has taken over the globe. Many companies have made changes to their websites and applications in order to comply with these laws, while at the same time neglecting the changing technical infrastructure upon which those systems are built.  In this session Cory will review the slate of changes imposed by browsers and operating systems in recent years which continue to impact existing architectures, and how those changes impact existing business processes.

Privacy is About More Than Just Regulation

Join us for an enlightening webinar as we explore the intricacies of embracing the Zero Trust Model, from theory to practice. Whether you're a novice or seasoned professional, this session will equip you with expert insights and actionable strategies for implementing Zero Trust principles effectively. Dive deep into understanding the Zero Trust Model and discover how it can revolutionize your cybersecurity approach. 
Join the session to learn how to:
• Understand the foundational principles of the Zero Trust Model and dispel common misconceptions.
• Learn strategic approaches to purchasing technology that align with Zero Trust objectives.
• Discover essential steps for crafting and implementing a robust Zero Trust plan.
• Gain insights into achieving major milestones early in your Zero Trust journey.

Unlocking Zero Trust: A Blueprint for Secure Operations

Sign up for this talk here, or for ALL sessions of the ISSA International Cyber Resilience Awareness Day Virtual Summit here: https://issa.brighttalk.com/summit/6857/

Power utilities use a variety of Industrial Control Systems (ICS) to manage their operations which are structured into six independent but interconnected zones: Power Generation, High Voltage (HV) Transmission System Operation (TSO), Medium Voltage (MV) Distribution System operation (DSO), MV Distributed Generation, Low Voltage (LV) power delivery and LV Distributed Generation. Each of these zones includes electrical and mechanical assets, process controllers and communications, which perform local control within their zone and communicate with other zones. The power grid structure described here is in line with the deployment of the Smart Grid architecture, which also includes MV and LV distributed generation, and Industrial Internet of Things (IIoT).

Cyber-Secured Power Utility Operation

The 2024 Annual Membership Meeting will be held on September 26 @ 1:00 PM EDT. This meeting is held once a year to provide the membership with information on the past year, current happenings, and the future direction of your professional association.

  - Learn about ISSA International current activities to enhance your chapter participation and membership year-to-date in 2024
  - Discover what ISSA International is planning in 2025 to provide value and opportunity for members and chapters
  - Review ISSA International financial reporting from 2023
  - Ask Questions. We want to hear from you. This is your opportunity to ask direct questions to the ISSA Board President and Executive Director of ISSA International.
  - Hear about the newly elected, incoming ISSA International Board Members

2024 Annual Membership Meeting

Cyber Security

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

2024 Annual Membership Meeting

Presented by

About this talk

Information Systems Security Association