CISO Boston schedule

•    What boards expect from today's CISO beyond technical reporting 
•    How security leaders communicate cyber risk using business outcomes 
•    Insights into strengthening relationships between CISOs, executives, and directors

•    Exploring how digital transformation, AI, and third-party dependencies are redefining enterprise cyber risk
•    What CISOs need to know about the next generation of supply chain, vendor, and ecosystem threats
•    Insights into the technologies, strategies, and operating models helping organizations gain greater visibility and resilience across their extended enterprise

•    How to create governance frameworks for enterprise AI use
•    What is the risk of unmanaged AI tools and shadow AI adoption
•    Exploring data protection concerns in generative AI environments

•    How to lead executive decision-making during high-pressure incidents
•    What is expected from CISOs during ransomware or operational disruption
•    Insights into communication strategies during crisis response

•    Why identity has become the primary attack vector for modern enterprises 
•    How organizations are managing the rapid growth of machine identities, service accounts, and AI agents 
•    Insights into building an identity-first security strategy that supports Zero Trust

•    How organizations are evolving resilience strategies beyond traditional disaster recovery 
•    What lessons recent cyber incidents have taught leaders about operational resilience 
•    Insights into aligning business continuity, cyber resilience, and executive decision-making

•    What separates successful AI agent initiatives from pilots that fail to scale
•    How to align AI agent development with business objectives, operational needs, and risk requirements
•    Insights into the organization's journey from concept to deployment, including key successes, setbacks, and takeaways

•    How to identify hidden risks introduced by generative AI tools
•    What is increasing organizational exposure through AI adoption
•    Insight into shadow AI and unmanaged integrations
•    Exploring how AI changes data access patterns
•    How to monitor and govern expanding AI ecosystems

•    How to build a resilient security culture across the organization
•    What is driving risky employee behavior in modern workplaces
•    Insight into fatigue, trust, and security adoption challenges
•    Exploring human decision-making during cyber incidents
•    How to create security ownership beyond the security team
Thomas Shola, Executive Director IT, Cyber, Enterprise Data & Analytics, Resiliency Business Risk & Controls, FIRST CITIZENS BANK

•    How to identify emerging AI-driven attack techniques 
•    What is changing in phishing, fraud, and social engineering through AI 
•    Insight into attacker adoption of automation and synthetic content
•    Quantum + AI: How will these technologies transform cyber risk over the next decade?

•    Translating technical findings into business risk
•    Where GRC adds value vs creates friction
•    Balancing compliance with real risk reduction
•    What boards want vs what security reports deliver

•    How to govern enterprise copilots and AI assistants
•    What is creating data leakage concerns in AI productivity tools
•    Insight into security gaps in embedded AI workflows
•    Exploring access control and permissions within AI ecosystems

•    Approaches to building a risk-based vulnerability management program and prioritizing vulnerabilities based on business risk. 
•    Insights into balancing security priorities with engineering capacity and reducing vulnerability fatigue. 
•    Successes, challenges, and strategies for gaining stakeholder buy-in and measuring the effectiveness of vulnerability management. management.

•    Measuring outcomes from security investments
•    Drivers of security platform consolidation
•    Lessons from reducing tool and vendor overlap
•    Balancing best-of-breed vs platform approaches
•    Metrics that demonstrate security effectiveness

•    Drivers of identity-based breaches in modern enterprises
•    Managing privileged access at scale
•    Rising challenge of machine identities and AI agents
•    Lessons learned from Zero Trust implementations
•    Prioritizing identity investments under budget constraints

•    How to structure immediate response actions during a crisis
•    What is most critical during the early hours of incident response
•    Insight into executive decision-making under uncertainty
•    How to reduce chaos during high-pressure situations

•    What organizations would do differently if starting their AI journey today 
•    Which governance approaches have proven most effective in practice 
•    Open discussion on AI adoption, security, compliance, and organizational change