Thursday 9 November 2023
Kindly hosted by
Cybersecurity is not just a technical issue but also a people and operational issue that touches everyone throughout the organisation and beyond into the supply network and customer base. A cyber incident has the potential to be an existential event, not just impacting the bottom line but causing irrevocable damage to the organisation’s reputation. Because of the potential impact an incident could have on an organisation’s very existence, cybersecurity is no longer the responsibility solely of the IT function, but a critical risk for the board to consider.
The escalating number of high-profile breaches and the pervasiveness of ransomware have escalated the cybersecurity conversation to the boardroom in many organisations – recognition that responsibility rests with the C-suite and across the whole organisation. However, such enlightenment is not universal, and many boards remain ill-informed about the risk in cyberspace and their impact on an organisation’s ability to function.
The path to greater resilience starts with leadership, who set the ethos and culture that influence the organisation’s attitude to security. This SASIG event considers the business risks organisations are facing in cyber, what challenges cybersecurity teams and boards face in communicating that risk to each other, and how to mitigate them. We will also discuss what liabilities boards face from stricter regulation, and how an informed and open-minded approach to governance and policy is the critical enabler to greater operational resilience.
Presentations on the day included:
Welcome and introductions
Martin Smith MBE (info), Chairman and Founder, The SASIG
Rocio Concha, Director of Policy and Advocacy, and Chief Economist, Which?
Keynote: Focusing the board on the greatest heist in history
John Madelin, CEO, Cyber Balance
Panel session: What should we be telling the board, and what questions should they be asking?
Facilitated by John Madelin, CEO, Cyber Balance
Sir Ian Andrews CBE TD, Vice-Chair, National Preparedness Commission
Ursula Morgenstern, Business Mentor and Advisor, Thinker Systems
Paul Fyfe, Director of Civil Nuclear Security and Safeguards, Office for Nuclear Regulation (ONR)
Charles O’Brien, Partner, FGS Global
Security Governance
Stuart Osborne, Founder and Director, Fraser Osborne
Cybersecurity liability risks for boardrooms
Stewart Room (info), Global Technology Sector Leader, DWF Law
The transformational CISO – from the tech to the boardroom
Andy Fourie, Area VP, BlueVoyant
‘Lost in translation?’ – Developing engaged security and risk conversations across the board
Pete Cooper, Managing Partner and Head of Global Partnerships, C5 Capital
Followed by a panel session facilitated by Pete Cooper, Managing Partner and Head of Global Partnerships, C5 Capital
George Sinclair Adams, Chief Information Security Officer, C5 Capital
Purvi Kay, Head of Cyber Security Governance Risk & Compliance, BAE Systems
Rosie Marr, Deputy Director Cyber Operations and Assurance, Government Security Group Cabinet Office