Recorded:    September 23 | 2021      Watch

We are all in the risk business. No risk, no business. The biggest risk points are usually where the biggest opportunities lie to better meet your strategic objectives, enable and drive growth, improve reputation management and confidence in decision-making — and face fewer surprises.

A strong proactive risk management culture enables an organization to be more nimble, adaptable, and change-ready. On this panel discussion webinar we will address some of the key steps your organization can take to strengthen your risk management culture now and fuel business growth, including how to:

• Ask the right questions to accurately assess the risks and put plans and controls in place to mitigate them.
• Drive enterprise-wide accountability to break down silos.
• Give your employees appropriate training to enable them to take ownership of risks and identify and manage them more effectively.
• Develop communications plans for when events negatively affect perception of your organization.
• Leverage the opportunities that align to your strategic goals.

Moderator

Colin Whittaker, PCI Industry Alumni, Founder and Director Informed Risk Decisions Ltd. Colin has been instrumental in driving forward a risk and security strategy for payments over the last 15 years since he retired from the military in 2001, and took up the role of Head of Security at APACS. Whilst there he was one of the first people to be elected to the PCI SSC Board of Advisors where he was always keen to try and promote the differences in threat between Europe and UK, and the US. Since that election he hasn't moved far from the PCI domain. In 2010 he moved to Visa Europe and became the Vice President Payment System Risk with responsibilities for designing and operating the Visa Europe PCI compliance strategy for European merchants and service providers. He was also responsible for coordinating Visa Europe's approach to cardholder data breaches in Europe, and for the changes to the Visa Europe Compliance strategy through the creation of the Technology Innovation Programme which gave the very first PCI DSS compliance relief for EMV chip accepting merchants. In 2015 he went independent and currently provides cyber security risk consultancy services to a wide range of public and private companies. Colin has presented on Information Security at major events around the world, and has published a number of papers on security.

John C. Checco is an information security professional providing subject matter expertise across various industries. He currently resides as leader for the CISO Advisory Board on Financial Services for Proofpoint, and President Emeritus of the New York Metro InfraGard Members Alliance (an FBI public/private partnership program). John specializes in the areas of Zero-Trust Strategies, Responsible Automation, Biometric Security and Cyber-Physical coordinated threats on critical infrastructures. John has been a Strategic Advisor to the Board of the WSTA (Wall Street Technology Association) since 1997, active in InfraGard's NY Metro Chapter since 2003, and co-founder and co-chair for the NY Metro Joint Cyber Security Conference & Workshop series since 2014. Prior to his current role, John was Senior Vice President for Bank of America’s Global Information Security Innovation Group. He is founder of Checco Services Inc., an information security consulting firm that patented the award-winning bioChec™ keystroke and gesture biometric technologies.  John holds a professional certificate from Stanford University in Strategic Decision and Risk Management (SDRM), a variety of information security certifications (CCISO, CCSK, CISSP and CSSLP), and a dual BS/MBA degree from Pace University. He is well published and has presented in the field of information security. 

Jerry Caponera, VP Cyber Risk Strategy at ThreatConnect, leads the effort to quantify cyber risk in financial terms. He’s been working on cyber risk quantification efforts for a number of years and has a broad background in cyber, having worked for incident response, malware analysis, and services companies. He has spoken at a number of conferences worldwide including ISS World MEA, InfoSecurity Russia, and TM World Forum. He holds an MBA from the University of Massachusetts, an MS in Computer Science from the University of Pennsylvania, and a BS in Electrical Engineering from the University of Buffalo.

Hannah McClure leads the Implementation Services team at LogicGate, a SaaS company whose proprietary Risk Cloud™ platform is helping organizations to automate and streamline their GRC processes. Prior to joining LogicGate, Hannah worked in EY’s Risk Consulting practice, specializing in enterprise risk management, risk transformation, internal audit, internal controls, and compliance. During her time at EY, she advised organizations in a variety of industries, focusing mainly in the government/public sector. At LogicGate, Hannah leverages her consulting experience and CRISC certification (certified in risk and information systems control) to enable customers to transform Risk Management into strategic advantage through a proven GRC platform.

Joy Bhowmick, Vice President, Product Management, MetricStream.