FinCyber Today

Episode Notes With over 20 years of experience as a CISO, Phil Venables, Chief Information Security Officer at Google Cloud, talks about creating an AI framework, key use cases for AI in cyber, Google Cloud joining FS-ISAC's Critical Providers Program, how he approaches operational resilience, and gives advice on how CISOs can maintain work-life balance. Notes from our Discussion with Phil Go...

Episode Notes Daniel Barriuso, Global Chief Transformation Officer at Santander and Chairman of the FS-ISAC Europe Board of Directors, talks about the importance of addressing cybersecurity globally and holistically, while also taking regional differences into account. He draws on his experience as Global Chief Information Security Officer (CISO) at Santander and his current role to discuss how bi...

While the Board sets up broad policies and priorities for companies, there’s a whole cyber universe that Board members may not fully understand. Jerry Perullo draws on more than two decades of experience, including as CISO at Intercontinental Exchange/New York Stock Exchange (ICE/NYSE), and recently as interim CISO at Silicon Valley Bank, to explain his framework for presenting cybersecurity risks...

With a barrage of upcoming cyber regulations, financial firms will need to integrate some of the new requirements into their cyber and resilience programs. Erez Liebermann, Partner at law firm Debevoise & Plimpton, clarifies the key points of relevant cyber regulations that financial firm CISOs should know about. Highlights (1:11) Key trends of the recent cyber regulations (4:26) Pertinent det...

The scope of the great cybersecurity talent shortage is real. Kristopher Fador, CISO at Bank of America details where the greatest concentration of the shortage is, how to build a good cybersecurity talent pipeline for financial firms of all sizes, and how he views retention and attrition. Highlights (3:44) – The dangers of a lack of mid to senior level talent (7:09) – How Bank of America builds a...

With the help of Chat GPT and other AI tools, financial institutions can make decisions more quickly and with greater precision, but how crucial will human oversight be in the future of financial sector cybersecurity? Bashar Abouseido, MD, Chief Information Security Officer at Charles Schwab talks about the benefits and risks of using ChatGPT and other artificial intelligence in cybersecurity. Hig...

Tabletop exercises are a crucial component for enhancing threat and vulnerability management plans in fintech. Paige Johnson, Executive Director and Head of Americas Firmwide Simulation Utility at JP Morgan Bank, discusses the origin and development of these exercises.  Highlights How exercise scenarios are chosen (7:46) Have exercises turned into reality (10:20) The range of tabletop exercises in...

As the global financial sector prepares for the advent of quantum computing, security professionals are at the forefront of developing protocols for post-quantum computing (PQC). George Webster, Chief Security Architect at HSBC, and Peter Bordow, Distinguished Engineer and Chief Architect of Post Quantum Cryptography and Quantum Systems, and Emerging Technology for Information and Cybersecurity at...

Laura Deaner, CISO at Northwestern Mutual, shares her advice for mid-senior professionals who want to become a CISO, the best practices for incorporating artificial intelligence like ChatGPT into the corporate ecosystem,  the business case for more diversity in cybersecurity, and more including: (00:52) - The advantages of having the CISO manage both cybersecurity and IT risk management.  (04:21)...

Dr Boaz Gelbord, Senior Vice President and Chief Security Officer of Akamai, discusses the changing role of the CISO in the advent of new tools that are changing the cybersecurity landscape, why security is becoming a big data problem, and more including:  The CISO role is now more integrated with business operations (03:30)  How the evolving Internet ecosystem is impacting cyber security (13:20)...

Meg Anderson, the Chief Information Security Officer (CISO) at Principal Financial Group, talks about the CISO's role in helping a large, multi-national company stay flexible by making sure security controls are in place and managing risks. She also covers: Centralization versus decentralization of cybersecurity controls in a large corporation:  (2:10) How to keep a large number of employees...

Ariel Weintraub, CISO & Head of Enterprise Security at MassMutual, discusses the spectrum of her cybersecurity responsibilities, including employee diversity and retention, managing an evolving threat landscape, and incentivizing staff to be more aware of their role in attack prevention.   How to address new initiatives and evolving priorities while managing ongoing cyber threats. (25:38 – 26:...

Jenny Menna, Vice President, Threat Management and Response at Humana, and Member of the FS-IAC Board of Directors discusses the active threats to the insurance and healthcare sectors, including:   Which two ongoing threats the insurance and healthcare sectors are monitoring, and how those threats continue to evolve (7:35 – 8:30). The importance of forming a strategy around employee education (11:...

Teresa Walsh, FS-ISAC’s Global Head of Intelligence joins the show to talk about a wide range of topics in cybersecurity, including: The difference in how the public and private sectors handle threat intelligence (00:58-03:04) What the role of the CISO is today (07:52-11:27) The current threat landscape for financial firms and how to go about understanding all of an organization’s dependencies (19...