C1Risk

Starting the day off with a bang- keynote dug into cyber security in an age of gai! Thanks to Joe Sullivan and Lily Y. For their keynote “How Are Cybersecurity Roles and Security Programs Evolving for GenAI?” How have we gone from a wang set up barred from internet connection to where we are today? Once Joe was able to convince the federal government to connect his desk to internet … it was off to the races. His most challenging experience was being terminated by uber for an alleged coverup after decades of being the person holding orgatizations to account. What have you learned from decades of incident response? Sometimes people you think are the strongest may crack under the pressure of the incident room You need to have a leader who can ha dle the pressure Lily- we advice that you keep the board and ceos of the world out of the incidebt room during a crisis. You want all this mapped put in in a playbook far in advance. Joe- you need to ensure you have a bridge to the leadership AND documentation about it. Thats why in my sentencing hearing the judge noted “where is thebceo - he is the most culpable in a breach” As the govt digs in to incidents like solar winds they will find good people who were underresourced. The respurcing gap ismon the shoulders of leadership (ceo and cfo) moreso than the CISO. Lily- another thing is that it is better not to have a policy than to have one you do not enforce. Joe- while every security team wants more resources you want to be csreful in how you articulate this. Some of the security purists can create a document trail that the government can grab onto. Joe-the good news is that more lawyers are becoming cyber savvy. skadden for instance discussed hiring 75 new cyber attorneys to meet board demand for legla advice on incidents. Lily- leader also need more substantive training. Now how do you see the role of the CISO changing. I noticed for instance that Uber no lonfer has a ciso… is that shofting more i der GCs? Joe: this is an interesting time for security executives. Like with people I am mentoring goingbup for a big CISO role the- they have started asking should I even take this job. Is it too stressful, risky, how do I protect myself. On the other hand there is a huge opp for CISO’s. I see it evolving into more of a true leadership role. Because these new areas are falling under CISO as the point digital leader: - Ai risk (there is already someone using it in every org) - misinformation and disinformation (deep fakes and corp identity abuse) - post quantum encryption risks Lily- from a financial stand point tech risk is the largest spend and risk bucket- and there is not budget for a c suite risk leader for every aspect of digital risk. Now is the time to elevate your role… network up and buold relationships and trust. Uplevel your vocabulary - talk the same language as the private equity bros and board….out of characters #legaltech #ilta #technocat

A fantastic start to our morning with Lily Y. and Joe Sullivan at #ILTAEVOLVE2024! International Legal Technology Association (ILTA) Kenneth Jones Denise Ash Katie LaGrange