Tuesday 2nd March 2021, 16:00 (GMT)

What is the goal of your information security program: Risk reduction or risk management?

Join this teissTalk to answer some of the biggest questions facing the Information Security industry including:

If you are managing risk well, is the additional cost to reduce risk is necessary?
Knowing and tracking your risks, and the controls you're going to put them in place to manage them.
Effective approaches to "tell the story" of the success of your information security activities?

Host

Jenny Radcliffe

Jenny Radcliffe—aka “The People Hacker”—is a force to be reckoned with. She can diffuse a crisis situation, talk her way into a secure building, and spot a psychopath at a hundred paces. She has been called a mind reader and a “human lie detector,” and likened to a Jedi Knight. In reality, she is an expert in social engineering (the human element of security), negotiation, persuasion and influence, and non-verbal communication, and deception—using her skills to help clients ranging from global corporations and law enforcement organisations to poker players, politicians, and the security industry.

Guests

Allan Alford

Delivery CISO

NTT Data Services

Allan is the Delivery CISO at NTT Data Services, formerly CISO at Mitel, Forcepoint and at Polycom. In his CISO roles Alford has managed enterprise security as well as compliance with various frameworks such as GDPR, NIST SP800-171 and ISO 27001.

With more than 30 years of IT and Engineering security experience, Allan has a strong product and cloud security background, having served at Pearson as Product Information Security Officer (PISO), supervising the security of a massive-scale company-wide cloud transformation program, and Polycom where he built and managed the product security program, integrating it fully into the business.

Vicki Gavin

Head of Information Security & Compliance

Kaplan International

Previously CISO at The Economist and Head of Business Continuity, Information Risk & Business Risk at Barclaycard, Vicki is considered an industry expert on Cyber Security. Vicki was awarded Cyber Security Woman of the Year, 2015 and Security Serious Unsung Hero Awards, Marathon (Wo)man, 2016.

She is often told her most valuable skill in this area is her ability to convey important information to senior business leaders in clear, understandable English, without resorting to industry jargon and meaningless acronyms. She passionately believes that security, privacy and continuity are business issues not IT issues and therefore need to be explained in terms business leaders understand.

Bridget Kenyon

Chief Information Security Officer – EMEA

Thales Digital Identity and Security

I am a highly motivated information security leader, experienced in strategy, planning, managing staff, running security reviews, designing policy, and handling security incidents.

My experience includes the greenfield development of Information Security Management Systems (based on ISO/IEC 27001), the initiation and project management of information security risk assessments, and the design and implementation of many awareness initiatives. I have competence in both the 'soft' and the 'hard' sides of IT and information security, including experience in network and system administration, policy and strategy development in the defence and education industries. I have the CISSP, CISM qualifications and am an Associate Member of the Institute of Information Security Professionals. I am also the editor for ISO/IEC 27014 (information security governance). Finally, I have been a QSA, qualified to assess companies against the Payment Card Industry Data Security Standard (PCI DSS).

My interests lie in the security of all types of systems, and the human aspects of system vulnerability. I'm the sort of person who will always have a foot in both the technical and strategy camps. I enjoy helping people to find solutions to thorny problems, and strongly believe that information security is fundamental to reliable business operations, not a 'nice to have'.