2023 FAIR Conference

Embrace Digital: Managing the Risk of Digital Transformation, Cloud, and AI

October 17 - 18, 2023

The Event

Organizations are undergoing profound change as they consider taking further advantage of digital transformation, moving critical business services to the cloud, and leveraging artificial intelligence to provide better products and services to their customers. How can businesses and government organizations achieve the right balance between maximizing the business potential of those initiatives, while keeping the business compliant to new disclosure requirements and maintaining an acceptable level of risk?

What risk management practices are needed to support the organization’s strategic business initiatives? These are the questions driving the agenda of the 2023 FAIR Conference. Hosted by the FAIR Institute and our sponsoring partners, 2023 FAIR Conference is the premier event in risk management that brings leaders in cybersecurity and operational risk management together to explore best FAIR practices that produce greater value and alignment with business goals.

The main conference sessions will be held on Tuesday and Wednesday, October 17 & 18. Additional training and lab courses will be held on Sunday and Monday, October 15 & 16. Safe Security will be hosting an invitation-only customer event on Thursday, October 19. You can find the detailed agenda for all sessions below.

Not Just Another Conference

Learn About FAIR™ Standards
- Discover emerging best practices and models for managing cyber risk from a business perspective

Discover New Tools
- Meet the FAIR solutions providers and partners to help you accelerate your risk management programs

Expand Your Network
- Tap into the wisdom of other strategic-minded leaders who have taken the FAIR journey themselves

Agenda

Sun, Oct 15

Mon, Oct 16

Tue, Oct 17

Wed, Oct 18

Thu, Oct 19

9:00 AM - 5:00 PM

FAIR Analysis Fundamentals Training Day 1

Introductions with Course Overview Intro to Risk Analysis and FAIR™ Basic Risk Concepts - Lunch - Terminology The FAIR™ Model Measurements

8:00 AM - 12:00 PM

Analyzing AI Risk with FAIR™

FAIR Institute Lab Session

9:00 AM - 12:00 PM

Calibrated Probability Assessments for Cybersecurity by Hubbard Decision Research

Part 1: Personal Calibration Exercises

9:00 AM - 5:00 PM

FAIR Analysis Fundamentals Training Day 2

Analysis Process Results Interpretation - Lunch - Case Study 1 - As a group Case Study 2 - Small group breakout

1:00 PM - 5:00 PM

Calibrated Probability Assessments for Cybersecurity by Hubbard Decision Research

Part 2: Practical Improvements For Estimation

Communicating FAIR™ Results to Non-technical Stakeholders

FAIR Institute Lab Session

Through the FAIR-CAM™ Looking Glass

Half-day Workshop with Jack Jones

6:00 PM - 8:00 PM

Welcome Reception

6:30 PM - 8:30 PM

CISO Dinner (by invitation only)

Location: Four Seasons Hotel Washington DC (Georgetown) Hosted by: Robert Rodriquez, Chairman and Founder, SINET

7:30 AM - 9:00 AM

Registration and Breakfast

9:00 AM - 9:20 AM

Welcome Remarks & Main Insights from the New Annual Cyber Risk Report

Nick Sanna, Founder, FAIR Institute David Burg, Cybersecurity Leader, EY

9:20 AM - 10:00 AM

Keynote Address: Navigating the Confluence of Cybersecurity and AI: Mitigating Risks for the Future

Chris DeRusha, Federal CISO, OMB; Deputy National Cyber Director, Office of the National Cyber Director Eric Goldstein, Executive Assistant Director for Cybersecurity, CISA

10:00 AM - 10:45 AM

Panel: What Models Do We Need to Improve Risk Management in the 21st Century?

Moderator: Robert Rodriquez, Chairman and Founder, SINET Paul Selby, CISO, Department of Energy Jennifer Buckner, SVP Technology Risk Management, Mastercard Nathaniel Davis Jr, Vice President, Corporate & Defense Security, Rolls-Royce

10:45 AM - 11:15 AM

30-Minute Networking and Exhibitor Break

11:15 AM - 12:00 PM

Panel and Roundtable: The Evolving Role of the CISO as a Business Leader

Moderator: Christopher Porter, CISO, Fannie Mae Vikrant Arora, CISO, HSS (Hospital for Special Surgery) Mark Tomallo, CISO, Victoria's Secret Mary Elizabeth Faulkner, CISO, Thrivent

Presentation: Connecting Cyber Risk Assessment to Integrated Decision Management

Douglas Hubbard, President, Hubbard Decision Research

Presentation: Improving Cyber Visibility and Decision-Making at Maersk

Neil David, Head of Cyber Risk Management, Maersk

12:00 PM - 1:00 PM

Lunch and Exhibitor Break

1:00 PM - 1:45 PM

Presentation: Is It Raining Risk? What Data says about Cyber Risk in the Cloud

Wade Baker, Partner, Cyentia Institute

Presentation: Winning Over The Doubters - Cutting Through Complexity to Exceed Stakeholder Expectations

Robert Moore, Vice President, Technology Risk, Mastercard Tom Callaghan, Co-Founder, C-Risk

1:00 PM - 4:15 PM

Workshop: Managing Generative AI Risk

Facilitator: Omar Khawaja, Field CISO Databricks, Board Member, Faculty Carnegie Mellon University (for CISOs, CXOs only)

1:45 PM - 2:15 PM

30-Minute Networking and Exhibitor Break

2:15 PM - 3:00 PM

Presentation: The Annual Cyber Risk Report

Carolyn Schreiber, Principal, Advisory, Risk, Cyber Security, EY Benjamin Gowan, Sr. Data Scientist | AI, Safe Security

Session: How to Re-think Third-Party Risk with FAIR-TAM™?

Moderator: Pankaj Goyal, Director, Standards & Research, FAIR Institute Sarah Sullivan, Director IS&T Security Performance, Thomas Jefferson University Hospitals Adam Wells, Senior Manager, Cyber Risk Services, Yum! Brands

3:00 PM - 3:30 PM

30-Minute Networking and Exhibitor Break

3:30 PM - 4:15 PM

Presentation: The CRQ Program Development Lifecycle

Zach Cossairt, Integrated Risk Program Senior Manager, Equinix Jon Oppenhuis, Director, Risk Strategy and Success, Safe Security

Sponsor Session: Using Cyber Risk Intelligence to Scale FAIR Assessments

John Feezell, Director, Risk Advisory Services, Kyndryl Bob Maley, Chief Security Officer, Black Kite

4:15 PM - 5:00 PM

Fireside Chat: Incident Response and Materiality

Kevin Mandia, CEO, Mandiant Saket Modi, CEO, Safe Security

Sponsor Session: Case Study on Leveraging Risk Quantification to Build An Integrated Risk Management Program

Damian Apone, Director, Global Director, Governance, Risk & Compliance, Genuine Parts Company Chris Correia, Associate Partner, IBM

Sponsor Session: Scenario Planning for Effect - A Case Study

Aaron McKay, Cybersecurity Engineer, SCRAM Systems Jack Whitsitt, Director of CRQ, Ostrich Cyber-Risk

6:00 PM - 9:00 PM

Awards Gala Reception

7:30 AM - 9:00 AM

Registration and Breakfast

9:00 AM - 9:45 AM

Keynote: The Future of Risk Analysis in an AI and Automation World

Jack Jones, Chairman, FAIR Institute

9:45 AM - 10:45 AM

Roundtable Discussion: How to Get Ready for the New SEC Rule on Cybersecurity

Moderator: Kim Nash, Deputy Bureau Chief, WSJ David Hirsch, Chief, Cyber Unit, Enforcement Division, SEC Brian Walker, CEO, The CAP Group Kurt John, CSO, Expedia Richard Borden, Cybersecurity Partner, Frankfurt Kurnit

10:45 AM - 11:15 AM

30-Minute Networking and Exhibitor Break

11:15 AM - 12:00 PM

Case Study: Connecting Threat Intel to risk with MITRE ATT&CK and FAIR™

Jon Baker, Co-Founder and Director, MITRE Center for Threat-Informed Defense Vidit Baxi, CISO, Safe Security

Panel: How is the Discussion About Cyber Risk Changing at the Board Level?

Moderator: Larry Clinton, President, ISA Elias Oxendine IV, CISO, Yum! Brands Kevin McCarty, CISO, Cigna Kris Lovejoy, SVP, Global Practice Leader, Security & Resilience, Kyndryl David Burg, Americas Cybersecurity Leader, EY

12:00 PM - 1:00 PM

Networking Lunch and Exhibitor Break

1:00 PM - 1:45 PM

Panel: Challenges and Opportunities of Moving to Quantitative Risk Management in ERM

Evan Wheeler, Tech Risk Mgt, Capital One Ted Webster, CSO, Centene Ramesh Sepehrrad, Head, Cyber & Tech Risk, Navy Federal Credit Union Evan Sekeris, Head of Non-Financial Risk-Americas, MUFG Tanweer Surve, CTO, Cloud Control Mgt, Wells Fargo

Presentation: Introducing FAIR-MAM™ - A Comprehensive Approach to Loss Modeling in FAIR™

Moderator: Nick Sanna, Founder, FAIR Institute Filippo Curti, Financial Economist, Federal Reserve Board of Richmond Tom Macphee, Cyber Risk Senior Manager, Cigna Erica Eager, Senior Director, Risk Quantification, Safe Security

Presentation: Quantifying Multi-Product Security and Privacy AI Risk with FAIR and NIST AI RMF

Tyler Britton, Security Engineer, Dropbox Taylor Maze, Risk & Governance Manager, Dropbox

1:45 PM - 2:30 PM

Case Study: Patch Prioritization with FAIR-CAM™

Denny Wan, Chair, Sydney Chapter, FAIR-CAM Workgroup, FAIR Institute John Linford, Forum Director, The Open Group Sasha Romanosky, Senior Policy Researcher, RAND

Panel: To Cyber Insure or Self Insure? That is the Question

Moderator: Arturo Perez-Reyes, SVP, Cyber & Tech, Newfront Tom Srail, EVP Cyber Risk, Willis Tower Watson Brandon Pinzon, CSO, Argo Group Mayur Patel, VP, Senior Cyber Underwriter, Munich

Presentation: Latest Research on AI Risk Modeling

Brandon Sloane, AI Governance, Meta Pankaj Goyal, Director, Standards & Research, FAIR Institute

2:30 PM - 3:00 PM

30-Minute Networking and Exhibitor Break

3:00 PM - 3:45 PM

Case Study: Using the FAIR Model for AI Risk-Based Accountability

Luis Enriquez, Professor at Université de Lille (France), and Universidad Andina Simón Bolivar (Ecuador)

Presentation: The State of the CRQ Market

Cody Scott, Sr. Analyst Security & Risk, Forrester Research

Presentation: Measuring Controls Effectiveness and Risk with FAIR-CAM™

Tyler Britton, Security Engineer, Dropbox Bryan Smith, VP, Product Management, Safe Security

3:45 PM - 4:30 PM

Case Study: Deriving Probability Distributions with Pairwise Relative Comparisons

Ernest Forman, Professor, George Washington University

Case Study: Measuring Real Life Cyber Attacks on Enterprise Networks

Christian Ellerhold, Lead Principle Engineer, Cyber Risk Management, Infineon Technologies

Panel: The Rising Ambition of Cyber Risk Management Programs

Moderator: Indraneel Shah, Managing Partner & Chief Strategy Officer, Intuitive.Cloud Meena Martin, VP, Cyber Risk and Assurance, GSK Daniel Phillips, Security Risk Management Lead, Meta

4:30 PM - 5:00 PM

Closing Remarks

7:45 AM - 1:30 PM

Safe Security Customer Day

By invitation only

Speakers