Cybersecurity

In this keynote talk to a group of top security executives from around the world, I challenged the audience to become true digital risk leaders, taking ownership not only of cybersecurity risks but also AI risks, post-quantum risks, disinformation risks, privacy risks, and all other areas requiring a top digital risk role. We won’t succeed in addressing these interrelated technical challenges if we treat them as separate verticals managed by different leaders.

While in Davos in January 2024, I gave talks at two events running adjacent to the World Economic Forum. On the cybersecurity front, at an event run by the Cyber Future Forum, I led a panel focused on the need for the private and public sectors to come together and work across national borders to defeat our common enemies. On the topic of humanitarian aid to Ukraine, I was asked in real time to jump into a panel to speak about the role that non-governmental organizations can play and how even a little shared effort can make a significant difference for those trapped in a war zone.

At the BlackHat Europe conference in London, I gave a keynote speech aimed at the general security practitioner and discussed recent developments across various regions of the world that have increased expectations for our profession and explored ways we need to evolve as an industry to meet those demands.

At the Hellman & Friedman 2023 CISO & CEO Summit, I spoke to a room full of security executives and their most important executive sponsors (CEOs, CFOs, etc.) about the need for CISOs to not view security as their exclusive problem and how we need to involve the entire executive team in figuring out the right way and amount to invest in security. Only when the entire executive leadership team understands the challenges at a deeper level will we achieve the right level of investment.

Security Innovation Network Event, NYC I gave a talk to a group of security executives from both the private and public sectors about the need for us to develop better mechanisms for collaboration between these sectors, even in the face of ongoing enforcement actions brought by the SEC and other Read more…

CSO50 Conference + Awards In this keynote, I was interviewed by the longtime publisher of CSO magazine about trends in security, and I shared my perspectives on the risks and opportunities we will see in the security profession in the near future.

Cloud Security Alliance SECtemper Conference, Seattle In this keynote talk, I covered trends in cloud security and lessons learned from my career, focusing on what teams and leaders can do now to enhance their efforts and outcomes.

DEF CON – A Different Uber Post Mortem In this speech available on YouTube now, I walked through the Uber case from the perspective of a security researcher rather than that of a company insider.

BlackHat CISO Summit USA 2023 At the BlackHat CISO Summit, I spoke to an audience of security executives about the lessons learned from examining the Uber case.  I shared strategies leaders can use to prepare their company, their team, and themselves for any crisis, ensuring it can be weathered effectively. Read more…