Building a Cyber Risk Management Program

Brian Allen was the Chief Security Officer for Time Warner Cable, a critical infrastructure, Fortune 130 enterprise. He worked for EY as the sub-competency lead for their cyber risk management program efforts, presenting to dozens of boards and c-suite executives at some of the largest global organizations. Today, Brian works at The Bank Policy institute as the SVP, Cybersecurity and Technology Risk Management, working with bank executives (CEO, GC, CRO, CISO), advocating for the industry in front of regulators, legislators, law enforcement agencies, and the intelligence communities. Mr. Allen has worked on several industry and government coordinated critical infrastructure groups including the executive committees of the Comm-ISAC and Comm-Sector Coordinating Council. He was appointed by the FCC Chairman to represent the communication industry in working with NIST on the development of the Cybersecurity Framework. Mr. Allen is an author of two enterprise security risk management books, an Adjunct Professor at the University of Connecticut's MBA Financial Risk Management program, teaching cybersecurity risk and enterprise risk management concepts, and has spoken globally on the topic, including multiple keynote addresses. He holds multiple industry certifications and is a member of the New York State Bar Association. Brandon Bapst works as a consultant and executive adviser in EY's Cyber Transformation practice, and has more than eight years of strategic experience in the security risk field. In his current role with EY, he works closely with executives, CSOs and CISOs in developing strategic cyber risk programs. He has worked with Global Fortune 100 companies to transform their tactical security programs into holistic enterprise security risk management practices. He is a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and Certified Information Systems Auditor (CISA). Terry Allan Hicks is a longtime business and technology writer, focusing primarily on the interrelated areas of financial services, information security, and regulatory compliance and corporate governance, with experience including more than twenty years as a senior writer with Gartner, the world's leading IT research and advisory firm. He is also the published author of more than twenty books.