As we realize the transformative power of the cloud, AI and machine learning, has our culture of responsibility and ethics kept pace? How do we harness our new technological capabilities to the understanding of how to use them well?

Organizations are in the midst of an increasingly complex patchwork of international privacy regulations. These regulations create significant compliance challenges and operational risks. In this month’s episode, Diana and guests give advice on how to journey across the intricate landscape of cross-border data protection requirements - all while maintaining operational efficiency.

Key discussion points will include:
- How to build a coherent privacy strategy amid conflicting international requirements and enforcement approaches
- The evolving landscape of major privacy frameworks including GDPR, CCPA/CPRA, LGPD, and emerging regulations
- Building scalable privacy programs that can adapt to regulatory changes across multiple jurisdictions
- Implementing data governance frameworks that balance compliance requirements with business objectives
- Developing risk-based approaches for prioritizing privacy controls in resource-constrained environments
- Strategies for building privacy-by-design approaches that reduce compliance burden
- Approaches for effectively communicating privacy risks to executive leadership

Join to hear how you can effectively balance the complex challenges of international privacy compliance with maintaining effective business operations.

Help! How Can I Manage International Privacy Requirements?

AI attacks are growing, and cybercrime damages are projected to reach unprecedented levels in the coming years. Organizations are now facing mounting pressure to optimize security investments AND effectively manage incident costs. 

This critical webinar delivers an unvarnished examination of the financial realities of cybersecurity incidents and provides insights into strategies for containing costs without compromising defensive capabilities.

Key discussion points will include:
- How to accurately quantify the true financial impact of security incidents beyond immediate remediation
- The hidden costs that often escape traditional security budgeting and risk assessment processes
- Emerging methodologies for developing more comprehensive cybercrime cost models
- Building risk-based approaches that align security spending with potential financial exposure
- Creating incident response protocols specifically designed to contain cascading financial impacts
- Establishing governance structures that balance security requirements with financial constraints
- Strategies for communicating security economics effectively to executive leadership

Join Diana and guests as they share how security leaders can manage the financial impact of cybercrime in an era of increasingly hostile threats.

Containing Cybercrime Costs: A Frank Discussion

Data breaches and privacy concerns can dominate headlines, and organizations are increasingly aware that trust has become a strategic business imperative. This month’s episode explores the emerging role of the Chief Trust Officer (CTrO), looking at how this position bridges traditional security functions with broader objectives that build and maintain stakeholder confidence.

Key discussion points will include:
- What the Chief Trust Officer role is and how it  has emerged from traditional security and compliance functions
- The expanding scope of trust-related responsibilities across security, privacy, ethics, and transparency
- Emerging organizational models for positioning trust leadership
- Creating cross-functional collaboration between technical and non-technical stakeholders
- Establishing trust as a competitive differentiator
- How to assess your organization's need for dedicated trust leadership
- Strategies for measuring and communicating trust initiatives to internal and external stakeholders

Join Diana and guest experts as they look at how to  understand, implement, and maximize the value of the Chief Trust Officer role.

Chief Trust Officers: What Are They?

With AI fully mainstream, security professionals are facing a threat landscape where bad actors are leveraging this tech with scary sophistication and scale. This month’s episode of The Security Balancing Act looks at the era of AI-powered attacks and provides actionable defense advice that security teams can implement to protect their organizations.

Key discussion points will include:
- How bad actors are weaponizing genAI for evermore convincing social engineering campaigns
- Emerging patterns in AI-driven reconnaissance, vulnerability discovery, and exploit development
- Building detection capabilities specifically designed to identify AI-generated attack content
- Implementing adaptive security controls that can respond to the speed and scale of AI-powered threats
- Creating security awareness training that prepares users for next-generation social engineering
- Establishing incident response protocols specifically designed for AI-augmented attack scenarios

Join Diana and her panel of security experts as they share how your organization can stay ahead of AI attacks and remain resilient against such sophisticated threats.

How Attackers are using AI - and Defense Patterns that Work

Today’s threat landscape is complex. Chief Information Security Officers face the increasingly challenging task of communicating risk effectively to executive leadership and boards. This month’s episode The Security Balancing Act sees Diana and guests share practical guidance for security leaders who must navigate difficult conversations about vulnerabilities, resource allocation, and acceptable risk thresholds in an environment where perfect security remains unattainable.

Key discussion points will include:
- How to translate technical security concepts into business impact language that resonates with executives
- The delicate balance between transparency about threats and maintaining organizational confidence
- Emerging frameworks for quantifying and contextualizing risk in ways that drive informed decision-making
- Building effective risk narratives that align security priorities with business objectives
- Implementing structured methodologies for risk prioritization and resource allocation discussions
- Developing executive-level dashboards and metrics that facilitate ongoing risk governance
- Leveraging real-world scenarios to illustrate effective risk communication techniques
- Creating a culture where security trade-offs can be discussed openly and productively
- Establishing feedback mechanisms that refine risk discussions over time

Join Diana and our panel of experienced CISOs as they share practical insights and best practices for having the hard conversations that ultimately lead to more resilient security postures and better business outcomes.

Having Hard Risk Discussions: Advice for CISOs

As AI transforms enterprise operations, security leaders face unprecedented challenges in developing governance frameworks that balance innovation with risk management. This critical webinar explores the complex terrain of AI policy development, offering practical guidance for organizations navigating the intersection of emerging technology, regulatory compliance, and security best practices.

Key discussion points will include:
- How to create AI governance structures that address both current capabilities and rapidly evolving future applications
- The tension between enabling innovation and implementing appropriate guardrails and controls
- Building cross-functional collaboration between security, legal, data science, and business stakeholders
- Implementing risk assessment methodologies specifically designed for AI applications
- Developing tiered governance approaches based on use case sensitivity and potential impact
- How to assess your organization's AI maturity and identify priority areas for policy development
- Strategies for addressing common policy challenges including data privacy, bias mitigation, and model security
- Approaches for building organizational awareness and buy-in for AI governance initiatives

Join our panel of security and AI governance experts as they share practical insights and best practices for developing effective policies that enable responsible AI adoption while protecting your organization from emerging risks.

The Tough Stuff: Getting AI Policies Right

So, you’ve been breached. What next? 

We’ve all heard the phrase “It’s not ‘if’, but ‘when’” when it comes to being a victim of a cybersecurity attack. As such, response is just as crucial as prevention. But how can you set up your incident response approach and equip yourself with the essential strategies to recover and rebuild your operations?

Join Diana Kelley and guests in this episode as we discuss: 

-  How to put together an effective incident response strategy 
-  The tools and technologies needed to overcome an attack
-  The importance of IR tabletops
-  Implementing resilient business continuity measures
-  And much more!

Respond: Strategies for Getting Back up and Running

91% of companies plan to implement continuous compliance in the next five years, according to Drata. Continuous compliance is defined as the process of ensuring that businesses conform to the established regulatory, legal, and internal policies at all times - not just during an audit. 

Join Diana Kelley and guests in this webinar In this session, we will delve into the concept of continuous compliance and explore whether it is merely a buzzword or a game-changer for organizations striving to meet regulatory standards and internal policies consistently. Join us as we discuss: 

- Is continuous compliance worth the hype?
- How businesses are handling continuous compliance strategies 
- Is continuous compliance right for your organization?
- And much more!

Continuous Compliance: Hype or Hero?

As cybersecurity experts are well aware, security and AI go hand in hand, and understanding what you should be doing now to protect your AI systems from evolving threats is crucial. 

Join Diana Kelley and guests in this session as we discuss: 

-  The need for prioritizing AI security measures 
-  Practical insights and actionable strategies to help you safeguard your AI systems 
-  Creating an AI security roadmap, and where to start
-  And much more!

Real Talk on AI Security: What You Should be Doing Now

As any CISO -- or cybersecurity business decision maker -- will attest, getting the budget approval for the resources your business needs to thrive can be a challenge. 

With the threat landscape constantly evolving, and new risks becoming expensive for businesses globally, Computer Weekly discovered that 46% of organizations are increasing their IT budget this year. There has never been a better time to advocate for the budget you need. 

Join Diana Kelley and guests as we discuss: 

-  How to create a cybersecurity budget plan
-  Best practices for effectively advocating for the necessary resources
-  Actionable tips to navigate budget challenges and secure the support your organization needs to safeguard against cyber threats
-  And much more!

Register now to empower your IT security advocacy efforts.

Budget Blues: How to Advocate for the Resources you Need

Join Diana Kelley and guests in the first episode of the year as they deep dive into the predictions, trends and tools they expect to see more and more of in 2025. Don’t miss this opportunity to gain a comprehensive understanding of the latest cybersecurity trends and stay ahead of potential risks.

2025 Vision: Unveiling This Year’s Cybersecurity Trends

In the last episode of the year, Diana Kelley and guests will discuss the trends we've seen over the last 12 months, the news stories that dominated our screens - and security strategies - and what learnings we should take from 2024, to apply to the year ahead.

2024 Recap: IT Security Trends and Insights

Join Diana Kelley and guests as they deep dive into Infrastructure as Code (IaC), what it is, how it impacts organisational risk and its business benefits.

Infrastructure as Code (IaC): What it is and How it Impacts Risk

Bug bounty programs allow companies to leverage the potential of ethical hacking by offering monetary rewards to those who successfully discover and report any weaknesses or vulnerabilities within their digital assets.

Join Diana Kelley and guests as they deep dive into bug bounty programs, how they work, and whether they are right for your organization.

Bug Bounty Programs: What Are They and Do You Need One?

Join Diana Kelley and guests as they explain the value of risk registers for your business, why so many organizations overlook them, and how to create your own risk register.

Risk Registers: The Most important Thing You're Not Doing

We've all heard the phrase 'not if, but when' - and with that in mind, creating a strategy to prevent a security incident from snowballing is imperative. 

If you can't prevent 100% of all attacks, you can control how they impact the rest of your organization. 

Join Diana Kelley and guests as we deep dive into:
-  Attack containment in the cloud
-  Why attack containment is so important in 2024 
-  Creating your attack containment strategy 
-  And much more!

Attack Containment: Limiting the Blast Radius in the Cloud

Businesses have spent the best part of the last three years riding the 'Zero Trust' wave, but where do Zero Trust practices stand now? 

In this month's instalment of The (Security) Balancing Act, Diana Kelley and panellists will explore what we have we learned about Zero Trust implementation over the past few years, and where do we stand for the years to come. 

Join us as we discuss:
-  What ZTA adoption looks like in 2024
-  The state of Zero Trust, and what does the future have in store?
-  The impact of widespread Zero Trust implementation 
-  And much more!

Zero Trust Maturity or Bust: Update on ZTA Adoption Patterns

Join Diana Kelley in this special episode of The Security Balancing Act as we sit down with top CISOs to discuss their insights on the game-changing technologies that have revolutionized their cybersecurity strategies.

Tech that Makes a Difference: CISOs Talk About the Tools they Can't Live Without

Presented by

About this talk

More from this channel